Information Security Officer - San Diego County Water Authority 4677 Overland Avenue, San Diego, CA, USA Bookmark Share Print 336 0 3

Listing Description

The Information Security Officer (ISO) is a senior-level manager who, under general direction plans, organizes, and directs the vision and the strategies necessary to ensure the integrity, availability and protection of the Water Authority's electronic data, Business System and Aqueduct Control System components. The ISO identifies and communicates risk to senior management; creates, maintains and enforces effective policies and supporting processes; and ensures compliance with legal and regulatory requirements.

Salary: $140,296.00 - $190,563.36 AnnuallyDirect and design security strategies, systems and controls for the Business System and Aqueduct Control System; evaluate the threat landscape and propose new or changed security strategies, policies and practices as needed.

Develop cyber incident response plans and manage incident response efforts; coordinate with Information Systems Manager and SCADA (Supervisory Control And Data Acquisition) Supervisor as needed to ensure that disaster recovery/business continuity plans are in place and tested.

Oversee the review and selection of security products.

Ensure information and cyber security policies and procedures are being properly implemented and enforced; schedule periodic information security audits and review the findings.

Serve as the organization's primary representative on cybersecurity matters to internal and external stakeholders and security-related consultants.

Create and communicate security objectives and key performance indicators; provide clear and understandable presentations and reports on security matters to management and Board members;

Provide training and mentoring to Information Systems and SCADA-related Operations & Maintenance staff; manage general employee security awareness outreach and training programs.

Serve as liaison to member agencies, law enforcement, homeland security or other external partners and stakeholders; manage security-related consultant contracts as needed.

Maintain current understanding of fast-changing information technology and operational technology threats; evaluate potential relevance and impact of emerging threats to the Water Authority and its member agencies.