
Website George Bush Intercontinental Airport
Job Description:
Under the general direction of the City of Houston (COH) Chief Information Security Officer (CISO), duties, functions and responsibilities of this position include:
Job Responsibilities:
- Work with COH CISO on a design and plan to allow COH Security Operations Center (SOC) visibility into HAS operations
- Direct an ongoing, proactive risk assessment program for all new and existing HAS systems and remains familiar with HAS’s goals and business processes so effective controls can be put in place for those areas presenting the greatest information security risk
- Oversee all ongoing activities related to the development, implementation and maintenance of HAS’s information security policies and procedures by ensuring these policies and procedures encompass the overall security of Information Technology (IT) and Operational Technology (OT) systems
- Responsible for collecting, analyzing, and escalating security events; aligning with the COH Cyber Division on facilitating proper incident response
- Assist with the development and implementation of an HAS business continuity/disaster recovery plan to offset the impact caused by intentional and unintentional acts
- Responsible for communicating risks and recommendations to mitigate risks to the COH CISO, COH CIO and HAS Director in cost/benefit terms so decisions can be made to ensure the security of information systems and information entrusted to HAS
- Assist with the development of HAS specific, role-based information security awareness training programs, and works with COH Cyber Division,
- HAS divisions and programs to present to staff as appropriate
- Ensure HAS vulnerabilities are managed and mitigated per COH Cyber Division policy
- Work with COH CISO to ensure proper protections, technical and physical controls are in place to protect HAS assets based on cyber industry standards (e.g., NIST 800-53)
- Expand and implement the existing Houston Airport System (HAS) information security risk management strategy and rolling 3-year IT
- Security Master Plan; ensure IT Security Plan alignment with the COH Cybersecurity Master Plan and controls address the confidentiality, integrity and availability of HAS systems, data and information
Job Requirements:
- GIAC Security Essentials (GSEC)
- Knowledgeable of Cyber Kill Chain and Diamond Model of Intrusion Analysis models
- Knowledge of SIEM, IDS, anti-virus/anti-malware and firewall technologies
- Subject matter expertise and coordinating, accumulating, writing/updating of appropriate technological processes and procedures to maintain a secure and operational environment
- Certified Information Security Manager (CISM)
- Solid expertise in formal/structured IT security risk assessment methodology, including understanding the implementation challenges and advantages across all levels of hardware platforms and software applications
- Knowledge and experience with LAN, WAN, VPN, routers, firewalls, servers, IDS/IPS, SIEM and DLP
- Ability to assist the COH CISO in research, design and implementation of cyber security solutions
- Certified Information Systems Security Professional (CISSP)
- Ability to interface, as required, with HAS workstation users, HAS server and desktop teams, HAS application support and HAS hardware/software vendors; coordinates projects with users for deadline requirements
- A strong understanding of both industry and federal government security standards and best practices, such as National Institute of Science and
- Technology (NIST), Control Objectives for Information and Related Technology (COBIT) for Information Security, and SANS Critical Controls
- Experience with a wide variety of operating systems: Windows Server, Windows 10, Windows 7, Linux etc.
- Knowledge and experience with Windows, Active Directory, group policy, DNS, encryption, patch management, anti-virus, system configuration management
- Project Management Professional (PMP)
- Experience developing a cyber strategy to address the security of IT and OT environment including design, process, and controls with consideration of future regulatory compliance
Job Details:
Company: George Bush Intercontinental Airport
Vacancy Type: Full Time
Job Functions: Other
Job Location: Houston, TX, US
Application Deadline: N/A
jobbry.net
Report Job