Job Summary

Who We Are
The City of Beverly Hills has a long-standing reputation for providing superior customer service to residents, businesses, and visitors. This characteristic, combined with outstanding staff in all departments, has been a hallmark of success for this high performance organization. The municipal government (approximately 1,080 full-time and part-time employees) provides the highest quality safety services, recreational, municipal services, and physical environment.

What We Do
The Information Technology Department is recognized among municipalities as a premier provider of technology infrastructure and services. The department's mission is to make information available anytime and anywhere by facilitating citywide and intergovernmental knowledge sharing and ensuring access to reliable, innovative, and cost effective technologies.

What We're Looking For
The City of Beverly Hills is seeking an outstanding Information Security Analyst. In this position you will be expected to ensure and maintain up-to-date on compliance with security and data privacy legislation, homeland security measures, industry standards and best practices. The person in this role will work on developing and implementing policies and procedures related to network security, servers and client access, Active Directory, Exchange, LDAP, firewalls, VPN, secure remote access, biometrics, internet access, virus protection, security filtering, and Data Center plant security and maintenance. The ideal candidate will have well-rounded experience working with all aspects of an agency's information security including but not limited to fire walls, VPN appliances, extreme networks, and disaster recovery plans. Additionally, the ideal candidate will be responsible, dependable, and displays a passion and commitment to working in fast-paced environment. We are looking for a team player that has outstanding written and verbal communication skills, customer service ethic, and enjoys working with a diverse group of people. This position reports directly to the Assistant Chief Information Officer.

Detailed Job Description:
For major duties, requirements, including knowledge, skills, & abilities, please see link:

Class Specifications | Information Security Analyst | Class Spec Details (governmentjobs.com)

Selection Process

Candidates who meet the minimum qualifications and whose interests and experience appear to meet the desired qualifications of the position will be invited to participate in the next steps of the recruitment process which will include:

• Supplemental Questionnaire
• Oral Interview
• Technical Project (tentative)

The best-qualified candidates who most closely meet the needs of the department may be invited to participate in the oral interview. All candidates will be notified by email regarding their recruitment status approximately 2-3 weeks after the recruitment period closes.

Conviction History
As a finalist for a job, you will be fingerprinted, and your fingerprints will be sent to the California Department of Justice (DOJ) and the Federal Bureau of Investigation (FBI). The resulting report of your conviction history (if any) will be used to determine whether the nature of your conviction (or arrest, in limited circumstances) conflicts with the specific duties and responsibilities of the job for which you are a finalist. Having a conviction history does not automatically preclude you from a job with the City. If you are selected as a finalist, you will be contacted to schedule a fingerprinting appointment.

Conclusion
Verification: Applicants may be required to submit verification of qualifying education and experience at any point during the recruitment and selection process. Note: Falsifying one's education, training, or work experience or attempted deception on the application may result in disqualification for this and future job opportunities with the City of Beverly Hills.

Disaster Service Workers
All City of Beverly Hills employees are designated Disaster Service Workers through state and local law (California Government Code Section 3100-3109). Employment with the City requires the affirmation of a loyalty oath to this effect. Employees are required to complete all Disaster Service Worker-related training as assigned, and to return to work as ordered in the event of an emergency.

Major Duties

An Information Security Analyst plans, organizes, coordinates, and implements the City's information security function; performs advanced and highly complex duties in developing, recommending, overseeing, implementing, and ensuring compliance with comprehensive information security strategies and programs.

EXAMPLES OF ESSENTIAL DUTIES - Duties may include, but are not limited to, the following:

• Ensure compliance with security and data privacy legislation, homeland security measures, industry standards, and best practices for areas of responsibility, e.g. security management for LAN/WAN/MAN/Wireless, telecommunications, voice, applications, data, and video.
• Develop and implement policies and procedures related to network security, servers and client access, Active Directory, Exchange, LDAP, firewalls, VPN, secure remote access, biometrics, internet access, virus protection, security filtering, and Data Center plant security and maintenance.
• Enforce data retention schedules and support departments in establishing data retention policies.
• Develop and implement the City's Disaster Recovery Plan to ensure the restoration of data, network, and communications resources in the event of catastrophic failure.
• Maintain high-availability environment including secondary and tertiary data replication measures.
• Monitor and create reports on all server, network, telecommunications, internet, and database activity.
• Ensure communications and data security protocols, and protects against unauthorized access, intrusion, modification, or destruction.
• Secure and monitor critical application systems including access control systems, financial systems, and other business intelligence, confidential, and customer service systems.
• Provide guidance and direction to technical staff to troubleshoot and resolve network access and communications problems.
• May lead and direct the work of others for assigned projects.
• Assist new or existing staff in learning departmental practices and protocols, methods, and procedures.
• Build and maintain positive working relationships with co-workers, other City employees and the public using principles of good customer service.
• Foster an environment that embraces diversity, integrity, trust, and respect.
• Be an integral team player, which involves flexibility, cooperation, and communication.
• Performs related duties as assigned.

Minimum Qualifications

Experience and Training

Any combination of experience and training that would provide the required knowledge and abilities is qualifying. A typical way to obtain the required knowledge and abilities would be:

Experience:

Three years of recent, paid work experience implementing, administering, and monitoring IT security solutions and programs in a high availability environment.

Training:

Equivalent to a Bachelor's degree from an accredited college or university with major coursework in Computer Science, Management Information Systems, Cybersecurity, or a related field.

License and Certificate

Possession of, or ability to obtain, a valid California driver’s license as required by the position.

Possession of an industry security certification similar or comparable to those listed below (one certification is required, two or more are desirable).

• Computing Technology Industry Association certification in Security+ (CompTIA Security+)
• Certified Information Systems Security Professional (CISSP)
• Global Information Assurance Certifications (GIAC) from SANS Institute:
  • GIAC Certified Incident Handler (GCIH)
  • GIAC Certified Intrusion Analyst (GCIA)
  • GIAC Certified Forensic Analyst (GCFA)
  • GIAC Certified Forensic Examiner (GCFE)
  • GIAC Reverse Engineering Malware (GREM)
  • GIAC Network Forensic Analyst (GNFA)

Knowledge, Skills & Abilities

• Information security architecture, design, and engineering with a primary focus on network switch and router technologies, tools, and solutions.
• Firewalls, intrusion prevention systems, including network switch and router appliances and software operations.
• System and program design parameters.
• Vulnerability scanning tools.
• Plan, design, installation, maintenance, and operation of local and wide area network equipment and operating systems.
• Multi-platform operating systems, e.g. Windows Server and Windows desktop operating systems.
• Current network hardware, protocols, and standards.
• Standards and best practices in network security.
• Routers, switches, remote access and VPN technologies.
• Computer hardware and software configuration, maintenance, and problem resolution.
• Risk assessment processes and practices.
• Pertinent local, state, and federal rules, regulations, laws and practices regarding data privacy.
• Standard office procedures, methods, computer equipment, and applicable software applications.
• Principles and practices of research, analysis, and project management.
• Principles and practices of work safety.
  

Ability to:

• Oversee all aspects of the City's information security function.
• On a continuous basis, know and understand all aspects of the job; intermittently analyze requirements, work papers, reports, and special projects; identify and interpret technical and numerical information; observe and problem solve operational and technical policy and procedures.
• Interpret and explain pertinent department policies, procedures, and protocols.
• Perform security incident investigation or analysis of a security incident or event.
• Effectively communicate and describe security issues and potential impact on City operations to peers, management, and non-technical staff.
• Maintain and prepare complex, comprehensive, and confidential reports.
• Prepare statistical reports.
• Develop and recommend policies and procedures related to assigned operations.
• Manage technical teams and security initiatives.
• Work in a fast pace work environment.
• Perform job duties independently and with little direction.
• Research and solve complex problem situations in a customer service environment.
• Work on multiple projects concurrently.
• Rely on experience, instructions, and pre-established guidelines to perform the functions of the job and accomplish goals.
• Work in an environment which encourages a certain degree of creativity and latitude.
• Use sound judgment in recognizing scope of authority.
• Operate and use standard office equipment including computers and applicable software.
• Maintain regular attendance and adhere to prescribed work schedule to conduct job responsibilities.
• Utilize appropriate safety procedures and practices for assigned duties.
• Establish and maintain effective working relationships with those contacted in the course of work.
• Work with various cultural and ethnic groups in a tactful and effective manner.
• Communicate clearly and effectively, both orally and in writing.