Information Technology Specialist 3 (Information Security)

Responsibilities include, but are not limited to:

• Participate in the development, interpretation, review and communication of information security policies, procedures, and standards.
• Participate in information security risk analysis and risk management processes with business and IT units.
• Participate in the continuous monitoring and protection of third party-vendor resources and determines events that require investigation and response.
• Support the implementation and improvement of information security incident response plans and reports.
• Review contract, service level agreement, memorandum of understanding language, and other documents to verify that they meet information security needs and requirements and align with agency and State information security policies.
• Keep abreast of relevant laws and regulations that could affect the security controls and classification of information assets and communicate legal and regulatory requirements.

Minimum Qualifications

For non-competitive appointment:

• Five years of information technology, cybersecurity, or information assurance experience*.

*A bachelor's or higher-level degree in any field including or supplemented by 15 semester credit hours in computer science or related field substitutes for three years of required experience; any bachelor’s substitutes for two years of required experience.

*An associate degree with 15 semester credit hours in computer science or related field may substitute for one year of required experience. Candidates in a bachelor’s degree program with at least 15 semester credit hours in computer science or related field may substitute such credits for one year of required experience.

*A master’s degree or higher in computer science or related field substitutes for one year of required experience.

Reinstatement:

• Candidates who have held Information Technology Specialist 3 (Information Security) title, may be eligible for consideration for reinstatement.

Preferred Qualifications:

• Two years or more of cybersecurity or data privacy experience.
• One or more certifications in data privacy and/or cybersecurity.

Please be advised that the New York State Insurance Fund (NYSIF) does not offer sponsorship for employment visas to employees or potential employees. Candidates sponsored for employment by an organization should be aware of their sponsorship status and the relevant expiration date(s) of that sponsorship before applying to this position.

Nysif

is not currently enrolled in eVerify, which is a requirement for certain types of employment verifications.