Chief Information Security Officer

About the role

The New York City Department of Probation is dedicated to improving public safety by supporting individuals on probation. DOP uses research-based practices to supervise and support people on probation and help prevent further interactions with the justice system. By expanding access to education and gainful employment opportunities, healthcare, family supports, and civic engagement, DOP empowers New Yorkers under their supervision to lead safe and thriving lives.

The Department of Probation (DOP) is seeking a Chief Information Security Officer to join its Information Technology team. This role is critical to strengthening the agency's cybersecurity and physical security posture, addressing current vulnerabilities, and implementing enterprise-grade solutions. The ideal candidate will have hands-on experience with network security technologies (e.g., Palo Alto, Cisco), surveillance systems (e.g., Genetec), and a strong understanding of threat detection, incident response, and compliance.

Responsibilities include, but are not limited to, the following

• Monitor network traffic and system logs using SIEM platforms and tools such as Palo Alto Panorama and Cisco SecureX to identify suspicious activity and investigate anomalies.
• Conduct vulnerability scans and penetration tests using tools like Tenable and Qualys to identify and remediate risks across infrastructure and endpoints.
• Respond to security alerts and incidents, contain threats, and support forensic investigations using packet capture tools, log analysis, and endpoint telemetry.
• Configure and maintain firewalls (Palo Alto, Cisco ASA), IDS/IPS, endpoint protection, and centralized port security systems to enforce security policies and block malicious activity.
• Lead the implementation of Genetec Security Center for CCTV coverage across agency facilities.
• Develop and enforce a formal IT security framework, including policies, incident response plans, and user awareness training.
• Deploy web filtering and site-blocking controls to prevent access to malicious or inappropriate websites.
• Implement centralized port security to detect and block rogue devices on the network.
• Lead the deployment of four Palo Alto firewalls to enhance protection of internal systems against external threats.
• Collaborate with internal bureaus and external partners, including NYC Cyber Command, to assess risks, share intelligence, and improve overall security posture.
• Evaluate IT and surveillance equipment prior to deployment to ensure compliance with security benchmarks.

Qualifications & Requirements

• A baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to projects and policies required by the particular position; or,
• Education and/or experience which is equivalent to "1" above.