Responsible for overseeing the development, deployment, and maintenance of JEA's cyber security defense strategy in order to safeguard JEA information systems and data integrity in alignment with other business stakeholders. This position requires advanced technical skills and a strong understanding of changing trends and technologies in the information security industry. Manages the Information Security staff while overseeing project activities associated with Information Security in addition to leading incident response and forensic tasks. Ensures the organization's cyber protections comply with all applicable local, state, and federal regulator requirements and provides ongoing risk assessments, along with promoting security awareness.

• Provides strategic direction and operational management of JEA's information security, including but not limited to development, deployment, and ongoing maintenance for the protection of JEA's enterprise assets.
• Safeguards information system assets by identifying and solving potential and actual security problems.
• Leads information security strategy to identify and mitigate current threats; evaluates industry trends to anticipate future impacts and potential risks.
• Responsible for all security policies, procedures, and standards based on ISO/IEC 27000 series, COBIT and NIST 800 family of publications.
• Plan and implement information security requirements that are or may become applicable to the organization (HIPAA, PII, SOX, NERC CIP, FERC, AWIA, PCI DSS, NACHA, FIPA, etc.)
• Oversees audit documentation preparation and submittal effort (e.g. NERC CIP, HIPAA, PCI, etc.).
• Develops operational plans to support implementation of Chief Information Security Officer (CISO) strategy and policies.
• Oversees and provides reports of key performance metric results to the CISO and other stakeholders that are related to the performance of compliance, incidents and risk management.
• Responsible for overseeing 24/7 Security Operations Center, Incident Response, and problem management.
• Ensures organization's awareness of information security requirements through training programs, performance reporting, and communication of policies and procedures.
• Provides direction for periodic audits to determine security violations and inefficiencies, responsible for leading timely and successful resolution to any identified issues.
• Plans, organizes, trains, coaches, directs, and evaluates the performance of assigned managers, supervisors, and staff, establishing and monitoring performance requirements and personal development targets, providing coaching for performance improvement and development.
• Performs other duties as required.

Education: Bachelor's degree in computer science, business or related field required. Graduate degree preferred.
AND Experience: Ten (10) year's successful experience in Information Security. Experience must include at least 2 years leading a team.
OR An equivalent combination of education, experience and/or training.

License/Certifications/Registrations:
Required: A valid driver's license is required prior to appointment and must be maintained during employment. *The following certifications are preferred or obtained in an agreed upon timeframe: * * ISACA CISM (Certified Information Security Manager) * ISACA CISA (Certified Information Security Auditor) * ISC2 CISSP (Certified Information System Security Professional) * EC-Council CEH (Certified Ethical Hacker)

/* /The minimum salary for this position is $156,800 annually. Total compensation is commensurate with education, licenses, certifications, skills, and experience.//

PHYSICAL REQUIREMENTS//

Sitting

Up to 8 hours per day

Lifting

Up to 2 hours per day

Walking

Up to 5 hours per day

Up to 50 max. pounds**

Standing

Up to 3 hours per day

Pushing

Up to 1 hour per day

Bending

Up to 3 hours per day

Up to 50 max. pounds**

Squatting

Up to 2 hours per day

Pulling

Up to 1 hour per day

Stooping

Up to 2 hours per day

Up to 50 max. pounds**

Reaching

Up to 2 hours per day

Climbing

Up to 1 hour per day

Balancing

Up to 1 hour per day

• Stairs*

Up to 1 hour per day

Twisting

Up to 1 hour per day

• Ladder*

Will not generally apply

Crawling

Up to 1 hour per day

• Step-stool*

  Up to 1 hour per day

Kneeling

Up to 1 hour per day

Excessive heat

Up to 5 hours per day

Typing

Up to 5 hours per day

Excessive cold

Up to 1 hour per day

Data Entry

Up to 5 hours per day

Dust

Up to 1 hour per day

• *

Humidity

Up to 5 hour per day

• *

Loud Noise

Up to 1 hour per day

• *

Hands in Water

Will not generally apply

Unusual hearing or vision demands:

None

Other physical demands or notes:

**JEA employees should not attempt to lift, pull or push a load in excess of 50lbs. without assistance. Care should always be taken when lifting, pushing or pulling in an awkward position.

Title: Director, Information Security

Location: null

Requisition ID: 13093