Policy Processing Clerk, Sr. jobs in Tampa, FL

JOB SUMMARY

This position will develop, maintain, review, and support the enforcement of the Clerk’s policies, procedures and plans, related to the Clerk’s security, incident response, disaster recovery, and continuity of operations.  This position will monitor and review legislative and judiciary changes for impacts to the Clerk's information security and continuity of operations ecosystem and update policies as needed. This position will identify, prioritize, and oversee risk mitigation. This position will collaborate with all of IT in the review of proposed projects, activities, and purchases to identify potential risks and ensure compliancy.

CORE COMPETENCIES

• Customer Commitment - Proactively seeks to understand the needs of our customers and provide the highest standards of service
• Dedication to Professionalism and Integrity - Demonstrates and promotes fair, honest, professional, and ethical behaviors that establishes trust throughout the organization and with the public we serve
• Organizational Excellence - Takes ownership for excellence through one's personal effectiveness and dedication to the continuous improvement of our operations
• Success through Teamwork - Collaborates and builds partnerships through trust and the open exchange of diverse ideas and perspectives to achieve organizational goals

JOB SPECIFIC COMPETENCIES

• Work with technology and business partners on their requirements and provide insight, interpretation and guidance on information security policies and standards
• Maintain strong understanding of inherent and residual risk along with information security controls
• Analyze policy exceptions to determine risk and impact to company and communicate the resulting information in both written and verbal formats to stakeholders
• Act as a subject matter expert in governance risk and compliance systems to document and record risks and decisioning to provide holistic risk perspective
• Act as an information security policy subject matter expert (SME) for reviewing, analyzing, and recommending changes to existing agency information security policies based on trends, industry standards, and best practices
• Act as the primary point of contact (POC) for policy analysis and facilitate policy discussions as needed
• Develop strategies for recognizing security governance needs and embedding them into our company processes and procedures
• Partner with business stakeholders to educate our staff and evangelize security policies, standards and principles at all levels of the organization
• Interface with various teams and departments to identify the security controls needed to protect their valuable data, and create strategies for implementing or maintaining these controls in our environments
• Research best practices, identify gaps and areas for improvement, and develop and maintain the information security policies
• Maintain strong knowledge of security-related regulations and standards
• Demonstrates detailed knowledge of NIST, HIPAA, PCI DSS, COBIT, risk assessments, security audits, incident response, and policy governance.
• Manages the communication of issues to key stakeholders.  Stakeholders include development teams, IT personnel, management, and the customer.
• Performs critical thinking as required.
• Performs post-resolution follow-ups to ensure successful resolution of issues.
• Research and enlist in training programs to stay current on latest industry trends.
• Contribute to the review of internal processes and activities and assist in identifying potential opportunities for improvement and automation.
• Ability to communicate effectively with all levels of the organization, including technical teams and high-level stakeholders.
• Strong documentation and technical writing skills required.
• Perform other duties as assigned.

REPRESENTATIVE DUTIES

Note: The following duties are illustrative and not exhaustive. The omission of specific statements of duties does not exclude them from the position if the work is similar, related, or a logical assignment to the position. Depending on assigned area of responsibility, incumbents in the position may perform one or more of the activities described below.

• May supervise, train, mentor, and evaluate performance of subordinate staff.
• Convenes and participates in collaborative meetings, conference calls, and video conferences, consisting of vendors, inter-local government agencies, technical support staff, and subordinate functional support analysts, related to support enterprise business solutions.
• Creates and maintains cybersecurity policies and procedures according to industry standard best practices.
• Manages the organization’s continuity of operations, disaster recovery, incident response, and risk mitigation plans.
• Reviews legislative and judicial changes for impacts to the Clerk's information security and continuity of operations ecosystem and update policies as needed.
• Maintains enhanced knowledge of business and IT processes to ensure compliancy with cybersecurity policies and procedures. 
• Serves as liaison to vendors, inter-local government agencies, and business units, as needed.
• Provides recommendations and guidance to all teams and stakeholders as needed to facilitate cybersecurity best practices.
• Performs other duties as necessary.

MINIMUM EDUCATION AND EXPERIENCE REQUIREMENTS 

A bachelor’s degree (or higher) and a minimum of six (6) years of experience in cybersecurity policy creation and analysis.  Must have extensive experience in continuity of operations, disaster recovery, incident response, and risk mitigation plan creation and maintenance.

Please note: Degree is preferred but will consider candidates with an equivalent combination of education, training and experience that would reasonably be expected to provide the job-specific competencies noted below. 

Please note that although a degree is preferred for this position, equivalent direct experience is also acceptable.

If you are substituting equivalent direct experience, it should be an appropriate combination of education, training, and direct experience that would reasonably provide the job-specific competencies mentioned above.

The direct experience substitutions for a degree requirement must meet the following standards:

• Two years of direct experience for an Associate’s Degree
• Four years of direct experience for a Bachelor’s Degree
• Six years of direct experience for a Master’s Degree
• Seven years of direct experience for a Professional Degree
• Nine years of direct experience for a Doctoral Degree

If you are substituting education for the equivalent experience, it should be an appropriate combination of education and training that would reasonably provide the job-specific competencies mentioned above.

The education substitutions for the experience requirement must meet the following standards:

• Associate’s Degree for two years of direct experience
• Bachelor’s Degree for four years of direct experience
• Master’s Degree for six years of direct experience
• Professional Degree for seven years of direct experience
• Doctoral Degree for nine years of direct experience

To complete your application, you must attach a copy of your academic transcripts, diploma or certifications showing attainment of the minimum qualifications unless you are substituting equivalent experience for educational requirements.

STARTING SALARY: $36.38 hourly/ $75,670 annually *Starting salary commensurate with experience* 

CERTIFICATION, LICENSE AND SPECIAL REQUIREMENTS

One or more of following certifications are preferred: CISA, CISSP, CISM, CRISC, or CompTIA Security

PHYSICAL DEMANDS

The work is sedentary and requires exerting up to 10 pounds of force occasionally and/or negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects, including the human body; may also require balancing, manual dexterity, hearing, mental acuity, repetitive motion, speaking, talking, and visual acuity.

WORK ENVIRONMENT

Work is performed in a dynamic environment that requires sensitivity and responsiveness to changes that include goals, priorities, and needs of the organization and position.

JOB CLASS

Unclassified- At-will Employees who serve at the pleasure of the Clerk and do not have appeal rights should they be demoted, suspended, or terminated.

CAREER PATH

• IT Manager
• IT Sr. Manager
• IT Director
• Chief Information Officer

To perform this job successfully, an individual must be able to perform the essential job functions satisfactorily.  Reasonable accommodations may be made to enable individuals with disabilities to perform the primary job functions described herein. Since every duty associated with this position may not be described herein, employees may be required to perform duties not specifically spelled out in the job description, but which may be reasonably considered to be incidental in the performing of their duties just as though they were actually written out in this job description.