Job: Information Security Specialist - Information Security Management

Information Security Specialist - Information Security Management
Position Number: 401120
Pay Range: Min: $71,446 Mid: $92,879 Max: $120,743
Location: Colorado Springs, CO
Posting Close Date: Please note: All postings will close at 12:00pm on the Posting Close Date. Candidates must apply for the position prior to this date and time. If the Posting Close Date is blank, the position will remain open until filled. The pay range above is based on the proposed 2010 pay schedule.

Description
Be Part of Our Vision for the Future Colorado Springs Utilities is looking for experienced professionals who will help us pursue our vision well into the next century. You will have an opportunity to contribute ideas and solutions in an empowering environment. We have an established priority of continually updating and incorporating state-of-the-art technology. Come work for an innovative, cutting-edge company. The Systems and Database Specialist is recognized internally and externally as an expert in the field and provides leadership to the organization in their area of expertise. Considering the tremendous amount of sensitive information our organization houses, Springs Utilities' Information Technology Services (ITS) department seeks a high level IT security expert. This person will have full technical responsibility for the installation and maintenance of security. We are currently hiring for three positions. Typical Responsibilities This job description is not intended to be an exhaustive list of all duties, responsibilities or qualifications associated with the job. Specific job assignments may include some or all of the following: * Provide leadership to other information security related positions. * Serves as a technical resource for enterprise applications and systems. * Plans strategies and oversees the operation and administration of the operating systems and/or database environments. * Evaluates, monitors, and maintains the enterprise-wide security infrastructure while analyzing, planning, and making recommendations for changes to ensure consistency across the enterprise. * Incumbents are expected to have full technical knowledge of security systems and administration. * Incumbents may direct/monitor the work of team members, and may have responsibility for project planning, management, implementation of upgrades, and security system replacement projects. * This person will help support the following services: remote access (VPN), security event correlation and reporting, content filtering, intrusion detection and prevention, and vulnerability assessment. * Collaborates with network, technology support center personnel and security administrators to enhance and improve process documentation. * This position will participate in an on-call rotation to respond to security incidents which may occur on nights, weekends, and holidays.

Job Specifications (Knowledge, Skills, and Abilities):
Solid Knowledge Of: * Extensive knowledge of information security principles including risk assessment, intrusion detection, network access control, threat and vulnerability management, and identity and access management. * Advanced technical proficiency with security-related systems and applications, especially TCP/IP networking, Cisco routers/switches, FireWall-1 policies, LDAP authentication, and Windows/UNIX/NetWare operating systems. * Experience with some of the following management/process frameworks: CobIT, COSO, ISO 17799/27000, ITIL, NIST, and NSA IAM/IEM. * Familiarity with NERC CIP security standards and compliance is highly desirable. * Specialized knowledge of operational and real-time control technologies used within the utilities industry such as supervisory control and data acquisition (SCADA), energy management system (EMS), and advanced metering is highly desirable. Skill In: * Ability to perform system functions at the command line level. * Writing technical materials. * Project management principles and practices. * Troubleshooting software and interfaces in complex, distributed, and/or closely integrated environments. * Excellent written and verbal communication skills. Ability To:
*Adjust to multiple and changing priorities, remaining flexible and open. Operate honestly and ethically; build trust. Consistent in action and word. Keep commitments
*Produce quality, accurate, prompt, and reliable results. Anticipate customer (internal and external) needs and fulfill them
*Communicate clearly and concisely in writing and verbally
*Keep others informed of changes; communicate relevant topics in a timely manner
*Seek input from others in problem solving and decision making; know how and where to get answers to questions
*Strive to improve the processes, efficiency and effectiveness of operations with an eye toward cost effectiveness; consider alternative courses of action; bring forward new ideas
*Identify and analyze issues/problems creatively
*Maintain current knowledge base as technology and processes change. Take responsibility for personal and professional growth
*Maintain cooperative working relationships; eliminate barriers to teamwork
*Make decisions based on facts and sound judgment
*Maintain compliance with CSU policies and procedures Demonstrated knowledge, skills, and abilities required for this position are most often acquired through the following level of academic training and range of practical experience or an equivalent combination as stated below:

Minimum Education Required: Most people in this occupation would have completed a Bachelor's Degree in Computer/ Information Technology * Bachelor's Degree in Computer/Information Technology * Minimum of three years' experience in an IT security role * Security certifications (e.g., SANS/GIAC, CISSP, etc.) are preferred Minimum Experience Required: Most people in this occupation would have about three or more years experience in an IT security role. Typical Licensing/Certification Requirements: Security certifications such as SANS/GIAC, CISSP are preferred Supervisory Responsibility: No Physical Requirements and Working Conditions: This position typically requires: reaching, fingering, talking, hearing, seeing and repetitive motions. Light Work: Exerting up to 20 pounds of force occasionally, and/or up to 10