Jobs & Marketplace

JOB CLASS TITLE: IT Security & Compliance Manager II

POSITION NUMBER: 65027809

DEPARTMENT: State Board of Elections

DIVISION/SECTION: Information Technology

SALARY RANGE: $90,734.00 – $147,226.00 Annually

RECRUITMENT RANGE: $90,734 – $127,000

SALARY GRADE / SALARY GRADE EQUIVALENT: IT10

COMPETENCY LEVEL: Not Applicable

APPOINTMENT TYPE: Time-Limited Full-Time

WORK LOCATION: Wake County

OPENING DATE: 08/29/19

CLOSING DATE: 12/26/19 5:00 PM Eastern Time

DESCRIPTION OF WORK:

**This position is a Re-Post. The working title has been changed to IT Security and Compliance Manager. Previous applicants do not need to re-apply and are still being considered.***

***This position is anticipated to be funded up to 3 years. Pending availability of funds, the position will be extended per management discretion.***

The N.C. State Board of Elections is the statewide agency that supervises elections administration, enforces campaign finance requirements, and conducts associated investigations. The State Board ensures uniform implementation of state and federal election laws and appoints local officials serving on county boards of elections. The Board is composed of five individuals appointed by the Governor from lists of nominees submitted by the chairs of the two political parties having the highest number of registered affiliates. Agency staff are civil servants subject to the State Personnel Act.

Primary Purpose of the Division
Information Technology operates as a Division of the State Board of Elections (SBE). The mission of Information Technology (IT) is to support and strengthen the Election’s business divisions by providing central services and infrastructure for state-wide access to information resources and technologies for all election officials. The purpose of IT is to research, advise, procure, implement and support State Board of Election business functions through the use of technology. The U.S. Department of Homeland Security (DHS) has designated elections as critical infrastructure with priority cyber security support under the National Infrastructure Protection Plan. The State Board of Elections (SBE) administers and maintains secure administration of elections in North Carolina. The Agency partners with DHS, FBI, National Guard, NC Department of Information Technology, and the NC Department of Public Safety. The agency develops and maintains a central elections management network that coordinates statewide elections activity, voter registration, and results.

Primary Purpose of the Position

This position serves as a Chief Information Security Officer (CISO) for the agency and reports directly to the State Board’s IT Infrastructure Manager. Position is designed to support agency functions in the areas of Security Incident Management and Response, Security Threat and Vulnerability Management, Risk Management, Security Administration; Security Education and Training; Security Publications; special security projects and investigations. This position serves as a manager overseeing cyber security projects and incident response efforts. The position manages compliance with statewide information security standards, such as National Institute of Standards and Technology (NIST), and requires a strong understanding of risk assessment, risk mitigation and risk management. The work will involve sophisticated problem-solving relying on internal agency resources and external partnerships to enhance the security posture of elections administration in our state. The position will develop and implement SBE’s information security program and advise SBE leadership on all aspects related to cyber security, assess voting systems security, and evaluate threats with the support of internal and external assets. The CISO will identify and implement security enhancements at the network, system, and application levels. The position will cultivate external partnerships, including within DHS, FBI National Guard, NC Department of Information Technology, and the NC Department of Public Safety. SBE is custodian of sensitive data on all registered voters and handles complex datasets from other government agencies.

Key Responsibilities and Duties Include:

• Develops, implements and monitors a strategic, comprehensive information security program to ensure appropriate levels of confidentiality, integrity, availability, safety, privacy and recovery of information assets

• Provides guidance, objective analysis, and recommendations regarding cybersecurity technologies and techniques (including on cybersecurity controls such as access and identity management, endpoint security, perimeter defenses, and threat intelligence)

• Provides leadership through strong working relationships and collaboration to develop strategic goals for information security compliance and risk mediation

• Oversight of project teams dealing with IT security issues, optimizing the contribution of people involved

• Manage the work of a team of operating systems programmers and analysts that are responsible for network system planning, configuration, installation, maintenance, trouble shooting and security.

• Leads and coordinates the development and maintenance of information systems security policies, procedures, standards, and guidelines, ensuring compliance with appropriate federal and state laws and regulations

• Develops and maintains the Incident Management Plan and escalate possible incidents to a Security Incident Response Team

• Serves as the liaison with external agencies and organizations, including law enforcement, as needed for incident response and planning

• Creates a risk-based process for the assessment and mitigation of any information security risk associated but not limited to supply chain partners, vendors, customers, and other third parties

KNOWLEDGE, SKILLS AND ABILITIES / COMPETENCIES:

• 10 years in a technology leadership position with at least five years in information security

• Proven track record of developing and implementing information security policies and procedures

• 6 years of experience leading complex, enterprise-wide security projects

• 6 years of experience managing cross-functional teams

• Experience implementing or administering common information security management frameworks such as ISO/IEC 27001, ITIL, COBIT or NIST

• [Preferred] Experience leading organizations through SOX, HIPAA, PCI or CJIS compliance efforts

• Knowledge of Risk Management Framework (RMF) requirements

• Knowledge of new and emerging information technology (IT) and cybersecurity technologies.

• Knowledge of cyber threats and vulnerabilities.

• Knowledge of incident response and handling methodologies

• Knowledge of cybersecurity and privacy principles used to manage risks related to the use, processing, storage, and transmission of information or data.

• Knowledge of security control requirements for HIPAA, PCI DSS, IRS 1075 and other federal compliance requirements

• Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).

• Knowledge of system life cycle management principles, including software security and usability.

• Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services.

• Extensive understanding of computer and network forensics, system and network security, incident management, intrusion detection, vulnerability and patch management, log analysis, and related technologies

• Ability to relate business requirements and risks to technology implementation for security-related issues.

• Excellent communication skills; inter personal; organizational and analytical skills, written and verbal communications, experience with management presentations

• Solid project management skills. Confidence and leadership as a member of project teams in a cross-functional environment.

• Ability to integrate information security requirements into the acquisition process; using applicable baseline security controls as one of the sources for security requirements; ensuring a robust software quality control process; and establishing multiple sources (e.g., delivery routes, for critical system elements).

• Must have or be able to obtain SECRET level clearance

• Detail and goal oriented.

• Possess excellent communication skills and ability to engage with senior leaders to design well-constructed analysis and work cross-functionally with managers to integrate results into the operations.

• Good written and verbal communication skills and the ability to effectively clarify problem situations.

• Possess the ability to work under time constraints and other demands.

• Must possess the ability to establish and maintain effective working relationships and function well as a team member.

• Ability to manage timelines, resources and personnel (internal staff and contractors), and direct implementation efforts to completion.

• Knowledge of technologies and systems in-place with the capability of supporting these technologies and maintaining relatively stable system environments.

• Ability to interact as a productive team member on a project team or manages a project task.

• Ability to identify training needs of staff to promote the career path of employees.

• Ability to weigh alternatives and consequences to make informed decisions on current operational issues.

• Ability to gain support of superiors and clients, understand the impact of change and create a positive climate.

• Able to supervise and evaluate staff

MINIMUM EDUCATION AND EXPERIENCE REQUIREMENTS:

Bachelor’s degree in Computer Science, Computer Information Systems, Information Management or related degree from an appropriately accredited institution and five years of experience in IT security or closely related area; or

Bachelor’s degree from an appropriately accredited institution and six years of experience in IT Security or closely related area; or an equivalent combination of education and experience.

SUPPLEMENTAL AND CONTACT INFORMATION:

All applicants must complete and submit a State application for employment using the NEOGOV Online Job Application System (http://www.oshr.nc.gov/jobs/) for the State of North Carolina. To receive credit for your work history and credentials, you must list the information on the online application form. Any information omitted from the application cannot be considered for qualifying credit. Attached or incorporated resumes (including Text Resumes on application form) WILL NOT be used for screening for qualifying credit. Please make sure you complete the application in full. “See Resume” or “See Attachment” will NOT be accepted. Other attachments (except a DD-214 copy) will also be accepted, but not used in screening for qualifying credit. Applicants are required to scan and attach a copy of their DD-214 (Form 4 or Certificate of Release or Discharge from Active Duty) or discharge orders if they wish to obtain Veteran’s preference. Applicants may be subject to a criminal background check.

Due to the volume of applications received, we are unable to provide information regarding the status of your application over the phone. To check the status of your application, please log in to your account and click “Application Status”. It is not necessary to contact the Human Resources Office to check the status of an application.
If you are having technical issues submitting your application, please call the NEOGOV Help Line at 855-524-5627. If there are any questions about this posting, other than your application status, please contact the Elections and Ethics Human Resources Office.

CONTACT INFORMATION
NC Board of Elections
Human Resources Management Office
430 N. Salisbury Street
Raleigh, NC 27603
Phone: 919-814-0700

More Info

Job Purpose
An employee in this class performs election duties as it pertains to the certified voting equipment, including but not limited to coding, programming, testing and performing required maintenance on all equipment, requiring application and compliance with the Election Laws of North Carolina and Federal/State/Local voting regulations. This position performs technical and complex support activities associated with the preparation for and conduct of elections to include calibration of equipment, developing test scripts, collecting and auditing tabulation data. Employee will perform yearly ADA site evaluations and assist in assembly and distribution of precinct supplies. Employee within this position will need to possess proficiency in organizational skills, a strong aptitude in math, and knowledge of, or the ability to learn adn adhere to State and local statutes/regulations affecting elections and elections process. Public speaking will be required for training classes for election workers.

Work is performed in accordance with North Carolina General Statutes, North Carolina Administrative Code and State and Local Board of Elections departmental policies.
This position covers a variety of hardware and software support for our volunteers, and the BOE employees and their devices (PCs, laptops, smartphones, tablets.)

Work is performed in accordance with BOE departmental policies, but it requires the making of independent decisions and the use of judgment in applying procedures within the limits of established work procedures. Work is performed under the supervision of the Director of the Board of Elections.

Typically initial placement for new employees is customarily at the minimum point of the range posted. This position is posted through December 11, 2019 but may be extended longer based on qualified applicant pool received.

Responsibilities
This position covers a variety of hardware and software support for Board of Election and their devices (PCs, laptops, smartphones, tablets, Photo ID Camera). Work is performed in accordance with Alamance County and Board of Election policies and procedures that are compliant with HIPAA, CJIS, and PCI. Responsibilities include but are not limited to supporting hardware and software applications, resolving technical issues through diligent research. Employee may consult with precinct officials, vendors and others to resolve technical issues. The Employees IT work will be coordinated through the Alamance County IT Network Team and compliant with the safety and security protocols set forth by the County’s IT Department.

Program, logic and accuracy testing, vote tabulation and auditing of election results.
Support data, equipment and building security
Assists Election Director and staff as needed in election processing duties and studies on election matters.
Setup and management of online registration program for precinct officials.
Attend meetings and/or seminars as related to election functions.
Assures election procedures are strictly followed and facility, equipment and ballot security is maintained at all times.
Assist with updating and maintaining the Board of Elections website.
Assist with management and content of Board of Election social media accounts and news releases.
Convert data into readable format for dissemination to the public.
Filing public records requests.
Identifies state requirements and schedules adequate time to prepare necessary documents and supplies and meet deadlines according to state election codes and the department election calendar.
Implements and follows procedures to increase efficiency and accuracy of election processes.
Answers questions regarding voting equipment.
Helps design and present training programs to election precinct employees, volunteer workers and members of the staff. Helps train sufficient poll workers to conduct each election.
Performs all primary maintenance on and keeps proper maintenance and inventory records of all election equipment, associated software and coordinates calls for service and/or repairs to ensure proper operation of voting equipment.
Become proficient with state elections software in order to design (but not limited to) reports, forms, instruction sheets and ballot layouts for use at the polls and in various elections-related activities and coordinate ballot production.
Assists with any additional needs assigned as part of an election team that must absolutely prepare and conduct proper elections according to strict state and federal guidelines on time.
Provides IT hardware and software technical support over the telephone or in person to our BOE employees solving technical problems incurred in the installation or operation of county systems.
Travel to customer sites to troubleshoot the County’s BOE systems, as requested, at times on short notice.
Performs related work as required.
Qualifications
COMPETENCY STATEMENTS:

Accountability – Ability to accept responsibility and account for his/her actions.
Accuracy – Ability to perform work accurately and thoroughly.
Autonomy – Ability to work independently with minimal supervision.
Communication, Oral – Ability to communicate effectively with others using the spoken word.
Communication, Written – Ability to communicate in writing clearly and concisely.
Confidentiality – The ability to ensure information is kept secret and private and only shared with those that are authorized to have.
Customer Oriented – Ability to take care of the customers’ needs while following company procedures.
Detail-oriented – Ability to manipulate small pieces of data with accuracy and focus.
Ethical – Ability to demonstrate conduct conforming to a set of values and accepted standards.
Honesty / Integrity – Ability to be truthful, maintain high level of confidentiality and be seen as credible in the workplace.
Judgment – Ability to use good judgment and discretion as it relates to interpreting policies and procedures.
Multitasking – Ability to multi-task in a fast-paced environment.
Problem Solving – Ability to find a solution for or to deal proactively with work-related problems.
Relationship Building – Ability to effectively build relationships with customers and co-workers.
Safety-Minded – Creating a safe work environment; managing risks; reducing exposure liabilities.
Time Management – Ability to utilize the available time to organize and complete work within given deadlines.
Skills & Abilities
SKILLS & ABILITIES:
Education & Experience: Bachelor’s degree in Business Administration, Computer Science or any related field from an appropriately accredited institution and two years of experience in business consultation, process improvement or requirement gathering in an information technology environment; or an equivalent combination of education and experience.

Computer Skills: Considerable knowledge of computers and related technology devices. Robust computer hardware, software, and systems related experience including the Microsoft suite of tools, with some networking and database knowledge.

License/Credentials: Possession of a valid N.C. driver’s license is required for this position and maintaining a driving record in accordance with Alamance County policy.

Special Position Requirements: Position requires additional work hours (including Saturdays and Sundays) for eight to ten weeks per election. Additional hours can range 10-15 hour days, multiple days in a row for 8 to 10 weeks. Additional hours are compensated through compensatory time off. Otherwise the position is a Monday – Friday position (hours 8:00 am – 5:00 pm).

PHYSICAL DEMANDS:

N (Not Applicable) Activity is not applicable to this position.
O (Occasionally) Position requires this activity up to 33% of the time (0 – 2.5+ hrs./day)
F (Frequently) Position requires this activity from 33% – 66% of the time (2.5 – 5.5+ hrs./day)
C (Constantly) Position requires this activity more than 66% of the time (5.5+ hrs./day)

Physical Demands

Stand F
Walk F
Sit F
Manually Manipulate O
Reach Outward O
Reach Above Shoulder O
Climb O
Crawl O
Squat or Kneel O
Bend O
Talk/Hear C
See C
Taste/Smell N

LIFT/CARRY
10 lbs. or less F
11-20 lbs. O
21-50 lbs. O
51-100 lbs. O
Over 100 lbs. O

Push/Pull
12 lbs. or less F
13-25 lbs. O
26-40 lbs. O
41-100 lbs. O

Other Physical Requirements: Vision (Near, Distance, Peripheral)

WORK ENVIRONMENT: Standard Office environment the majority of the time, during election season polling sites vary in location and environments.
Agency
Alamance County Government
Address
124 West Elm Street

Graham, North Carolina, 27253
Phone
336-570-4039
Website

Home

More Info