Senior IT Security Specialist

About the role

The New York Independent System Operator (NYISO) is seeking a Senior IT Security Specialist to protect the confidentiality, integrity, and availability of its information and technical environments. This full‑time position supports NYISO’s enterprise security goals across a wide range of functions, from security operations to risk management.

Key responsibilities

• Design, implement, and manage cyber‑security architecture, including system integration, upgrades, patching, monitoring, disaster recovery and performance tuning.
• Lead the lifecycle of managed security platforms such as SIEM, threat‑management, anti‑malware, vulnerability scanners, and forensics tools.
• Conduct security incident response, threat analysis, vulnerability management, and supply‑chain cyber‑risk assessments.
• Develop, maintain, and enforce security policies, standards, procedures, and security awareness training.
• Perform backup and restoration procedures, lead audit efforts, and ensure compliance with corporate and regulatory standards.
• Mentor junior staff and collaborate with application developers, infrastructure teams, business customers, and vendors.

Required profile

• Senior‑level experience in information security within a complex, regulated environment.
• Proven ability to evaluate existing security measures, recommend improvements, and drive compliance with cyber‑risk frameworks.
• Strong analytical skills and experience leading security projects and audit initiatives.

Required skills

• Security Information and Event Management (SIEM)
• Threat Management Platform
• Anti‑malware prevention and analysis
• Vulnerability scanning tools
• Penetration testing methodologies
• Computer and network forensics tools
• Secure application coding practices
• Backup and restoration procedures
• Security incident response
• Security policy development