Chief Information Security Officer (CISO)

About the role

The Department of Records and Information Services is hiring a Chief Information Security Officer to lead compliance with Citywide Information Security Policies and provide high‑level support for the agency’s computing infrastructure. The role combines strategic security oversight with hands‑on technical management across multiple city facilities.

Key responsibilities

• Coordinate technology upgrades with the Office of Technology and Innovation.
• Develop and deliver security awareness programs, including annual training and ongoing campaigns.
• Ensure compliance with City of New York information security policies.
• Track cyber‑security incidents, manage vulnerability reports and drive remediation efforts.
• Maintain identity and access management documentation and enforce policies.
• Oversee patch management, software updates and deployment of cyber‑protection tools.
• Identify security gaps, document findings and implement corrective actions.
• Assess endpoint health and recommend improvements.

Required profile

• Master’s degree in Computer Science or related field from an accredited institution.
• At least three years of progressive full‑time IT experience covering applications development, systems development, networking, database administration or user services.
• Minimum 18 months of experience in a security‑focused role.
• Current civil service eligibility or permanent status in the Computer Systems Manager title.

Required skills

• Network security and server administration.
• Software configuration standards for servers and desktops.
• Identity and Access Management (IAM) policies.
• Vulnerability assessment and remediation.
• Patch management and software update processes.
• Use of cyber‑protection tools and endpoint health monitoring.