<p>Do you have a passion for IT Security? Do you have IT experience installing, implementing, and monitoring of communications or operating system software and hardware, performing network administration, maintaining high-end computing platforms, automated business systems, and implementing new systems? This might be the career for you!</p> <p>Upcoming Salary Increases and Incentives:</p> <p>$107,640 - $130,754 effective 7/1/2025</p> <p>$110,869 - $134,677  effective 7/1/2026</p> <p>2.5% Education Incentive - Bachelor's Degree</p> <p>5% Education Incentive - Master's Degree</p> <p>The Information Technology Security Officer is responsible for overseeing, monitoring, implementing, and supporting information system security for the City to protect the integrity of the City's networks, systems, applications, and data; for managing the design and implementation of content, information, and identity security policies and processes to protect the network, systems, and data; for coordinating IT audits and investigations; for processing public records requests; for planning and executing business continuity exercises; for coordinating activities with other divisions and departments; and for providing highly responsible technical support to the Chief Information Officer.</p> <p> *This position is an in-person position with no opportunity for remote work.</p> <p>APPLICATION PROCESS</p> <p>Applicants will be assessed on the application submitted. Due to the volume of applications received, resumes will not be screened for the purpose of determining who is the most qualified to compete in the testing process. It is the applicant's responsibility to fill out the "Education" and "Work Experience" sections of the application with complete information and adequate detail. Do not substitute any part of the application with the words "SEE RESUME."</p> <p>Applicants that are the most qualified will be placed on an eligible list and invited to a selection interview with the hiring department. </p> <p>Interviews for this position will be held in-person, with no opportunity for remote or virtual interviews. </p> <p>The Human Resources Department reserves the right to revise the testing process to best meet the needs of the City. The City of Modesto is an equal opportunity employer. We are committed to fostering, cultivating and preserving a culture of diversity, equity and inclusion.</p> <p>Essential and other important responsibilities and duties may include, but are not limited to, the following:</p> <p>Essential Functions:</p> <p> </p> <p>Oversee, design, select, implement and maintain technical and organizational security controls to ensure the confidentiality, integrity, security, and availability of assets, information, data, and services.</p> <p> </p> <p>Actively monitor systems performance, architecture changes, and upgrades to proactively avert potential problems; monitor the City's networks for security breaches and investigate violations when they occur.</p> <p> </p> <p>Review, implement, update and document City-wide information security policies and procedures; recommend and implement goals and objectives; establish performance standards and methods for providing technical and professional information technology support to City departments. </p> <p> </p> <p>Plan, develop, and oversee the work of staff involved in the performance of professional and technical information technology functions.</p> <p>Evaluate operations and activities of assigned section; implement improvements and modifications; prepare various reports on operations and activities.</p> <p>Secure enterprise information by designing, implementing, and enforcing security controls, safeguards, policies, and procedures. </p> <p> </p> <p>Review and assure security standards and procedures are reasonable and adequate; verify security measures and procedures are functional, maintained and tested. </p> <p> </p> <p>Serve as security information resource to staff, identifying security issues and recommending risk-reduction solutions; provide confidential services, as requested. </p> <p> </p> <p>Develop, produce, and execute security awareness orientation and training programs.</p> <p> </p> <p>Assume a key role in the execution of professional IT consulting/development projects; oversee the work of contractors involved with City IT projects and systems; correspond and collaborate with third-party applications, vendor sales, and support.</p> <p> </p> <p>Participate in budget preparation and administration; prepare cost estimates for budget recommendations; submit justifications for staffing, equipment, materials, and supplies; monitor and control expenditures.</p> <p> </p> <p>Use formal project management techniques and tools to effectively manage the scope of work, project costs, technical resources, and maintain schedule integrity; utilize project management software; make modifications and adjustments to ensure projects are delivered on time and within budget, as required.</p> <p> </p> <p>Manage complex business changes in the implementation of emerging Information Technologies.</p> <p> </p> <p>Interface with appropriate department staff in defining systems standards and operating procedures.</p> <p> </p> <p>Utilize current and emerging networking, communications, or operating system technologies.</p> <p>Carry out business process analysis/re-engineering, using a formal and proven methodology. </p> <p> </p> <p>Review system design and end-user documentation prepared by other project staff.</p> <p>Answer questions and provide information to the public; investigate complaints and recommend corrective action to resolve complaints, as necessary.</p> <p> </p> <p>Build and maintain positive working relationships with co-workers, other City employees, and the public using principles of good customer service. </p> <p> </p> <p>Observe and maintain a safe working environment in compliance with established safety programs and procedures.</p> <p>Marginal Functions:</p> <p> </p> <p>Perform related duties as assigned.</p> <p>Knowledge of:</p> <p>Information security polices, regulations, and requirements.</p> <p> </p> <p>Principles and practices of administering network security.</p> <p> </p> <p>Principles of incident response, disaster recovery, and forensics.</p> <p> </p> <p>Principles and practices of technology advancements and how they can/will be applied within the current/future business models.</p> <p> </p> <p>Information Technology best practices and quality assurance programs.</p> <p> </p> <p>Project management methodologies, including project estimating, planning, executing, and examining business or functional issues including technical, operational, and management concerns.</p> <p> </p> <p>Technical problem solving and solution development.</p> <p> </p> <p>Pertinent federal, state, and local laws, codes, rules, and regulations.</p> <p>Principles and practices of research analysis and management.</p> <p> </p> <p>Principles and practices of budget development, implementation, and monitoring.</p> <p> </p> <p>Principles and practices of supervision, training, and performance evaluations.</p> <p> </p> <p>Industry standard networking and communications protocols, network design, management, and security.  </p> <p> </p> <p>Wide Area Networks, backbone network; Asynchronous Transfer Mode (ATM), and Regional Networks.</p> <p> </p> <p>Research and evaluation methods associated with hardware, operating systems, and communications software; capabilities and limitations of current hardware, operating systems, and communications software.</p> <p> </p> <p>Methods for implementing and managing network operating systems.</p> <p> </p> <p>Data communications and telecommunications with an emphasis in networking.</p> <p> </p> <p>Office procedures, methods, and equipment including computers and applicable software applications such as word processing, spreadsheets, and databases. </p> <p> </p> <p>Ability to:</p> <p> </p> <p>Organize, implement, and direct assigned section activities and operations.</p> <p> </p> <p>Manage network security including, planning system architecture, installing, configuring, and supporting security devices such as firewalls and intrusion detection systems (IDS).</p> <p> </p> <p>Assess risks to systems and develop plans to minimize potential threats.</p> <p> </p> <p>Design new security systems or upgrade existing ones.</p> <p> </p> <p>Test and evaluate security, web and social media products.</p> <p> </p> <p>Plan for disaster recovery in the event of security breaches.</p> <p> </p> <p>Test procedures by simulating breaches/penetration testing.</p> <p> </p> <p>Investigate breaches and carry out corrective actions.</p> <p> </p> <p>Test systems for weak points/vulnerability scanning.</p> <p> </p> <p>Ensure City procedures meet national and international network security standards.</p> <p> </p> <p>Remain current with the latest trends and developments in the computer, networking, and telecommunications industry.</p> <p>Apply knowledge of industry best practices, business process re-engineering, or change management methods.</p> <p> </p> <p>Create and implement project plans.</p> <p> </p> <p>Prepare project proposals including the submission of budget items. </p> <p> </p> <p>Design and develop presentations, documentation, and training.</p> <p> </p> <p>Prepare workflow and process diagrams and cost/benefit analysis.</p> <p> </p> <p>Manage the technical aspects of the assigned systems, from analysis through deployment and management.</p> <p> </p> <p>Interpret, explain, and apply City and department policies, procedures, rules, and regulations.</p> <p> </p> <p>Assist in the development and monitoring of an assigned program budget.</p> <p> </p> <p>Develop and recommend policies and procedures related to assigned operations.</p> <p>Carry out and/or manage network design, development, deployment, support, and maintenance.</p> <p> </p> <p>Manage the planning, installation, evaluation, monitoring, and implementation of non-application software associated with computer operating systems such as Unix or Microsoft Windows.</p> <p> </p> <p>Supervise, train, and evaluate personnel.</p> <p>Establish and maintain effective working relationships with those contacted in the course of work.</p> <p> </p> <p>Communicate clearly and concisely, both orally and in writing.</p> <p> </p> <p>Operate office equipment including computers and supporting word processing, spreadsheet, and database applications. </p> <p> </p> <p>EXPERIENCE AND TRAINING GUIDELINES</p> <p>Any combination of experience and training that would likely provide the required knowledge and abilities is qualifying.  A typical way to obtain the knowledge and abilities would be: </p> <p> </p> <p>Experience:</p> <p>Four years of increasingly responsible experience installing, implementing, and monitoring of communications or operating system software and hardware, performing network administration, maintaining high-end computing platforms, automated business systems, and implementing new systems. </p> <p>Training:</p> <p>Equivalent to a Bachelor's degree from an accredited college or university with major course work in a computer related field, business information systems, public administration, business administration, or a related field.  </p> <p>License or Certificate:   </p> <p>Possession of, or the ability to obtain, a valid California driver's license.</p> <p>Additional Requirements:</p> <p>Incumbents must be able to pass a P.O.S.T. level background investigation prior to appointment for clearance to work on Police Department Information Systems.</p> <p>Mobility: frequent use of keyboard; frequent sitting for long periods of time; occasional bending or squatting.Lifting: frequently up to 10 pounds; occasionally up to 25 pounds.Vision: constant use of overall vision; frequent reading and close-up work; occasional color and depth vision.Dexterity: frequent repetitive motion; frequent writing; frequent grasping, holding, and reaching.Hearing/Talking: frequent hearing and talking, in person and on the phone.Emotional/Psychological: frequent decision-making and concentration; frequent public and/or coworker contact; occasional working alone.Environmental: frequent exposure to noise.</p> <p>WORKING CONDITIONS</p> <p>Work is performed in a typical temperature-controlled office environment subject to typical office noise and environment. Positions require occasional overtime or weekend work and the ability to travel.</p>