Job Abstract

Under administrative direction, is responsible for planning, managing, developing work rules, training, coordinating, and administering all activities and personnel of such staff positions as administration, citizen participation, research, and finance, and manages such personnel as are assigned to specific functions in the performance of the necessary duties. Performs other job-related duties as required.

A High School Diploma or GED is required. A Bachelor's Degree is required. Four years of full time paid management or administrative experience is required. (Substitution: Two years of experience may substitute for each year of college education lacking. A valid State of Ohio Driver's License is required.

Duty Statement (Function):
Under the administration direction, you will be responsible for leading our cybersecurity efforts and ensuring the protection of our critical digital infrastructure. You will be responsible for overseeing all aspects of cybersecurity operations, including monitoring, incident response, and compliance adherence.

Responsibilities:

• Strategic Leadership: Provide strategic direction and leadership in developing and implementing cybersecurity strategies to mitigate risks and safeguard airport assets.
• Team Management: Lead and mentor a team of cybersecurity professionals, fostering collaboration, skill development, and a culture of continuous improvement.
• Operational Oversight: Direct day-to-day cybersecurity operations, including monitoring network traffic, managing security incidents, and maintaining incident response protocols.
• Policy Development: Develop and enforce cybersecurity policies, procedures, and technical standards to ensure compliance with industry regulations and best practices.
• Collaboration: Collaborate with airport departments and external stakeholders to integrate security controls into business processes, applications, and infrastructure.
• Risk Management: Conduct risk assessments, prioritize remediation efforts, and ensure compliance with relevant regulations and standards, such as TSA and FAA requirements.
• Vendor Management: Manage relationships with third-party vendors and service providers to ensure the security of outsourced systems and services.
• Threat Intelligence: Stay informed about emerging threats and leverage threat intelligence to proactively detect and mitigate potential security incidents.
• Incident Response: Lead incident response efforts, including investigation, containment, and recovery, and ensure timely communication with stakeholders.
• Reporting and Compliance: Prepare and present reports on cybersecurity metrics, incidents, and remediation efforts to airport management and regulatory agencies.
• Technical Expertise: Utilize familiarity with domain structures, user authentication mechanisms, fundamental cryptography, and advanced understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth, and common security elements.
• Hands-On Experience: Analyze high volumes of logs, network data (e.g., Netflow, FPC), and other attack artifacts in support of incident investigations, and manage vulnerability scanning solutions effectively.
• Regulatory Compliance: Ensure familiarity with the DOD Information Assurance Vulnerability Management program and NIST Security and Privacy controls.
• Proficiency with Tools: Demonstrate proficiency with tools such as Cisco Firepower Threat Defense (FTD) firewalls, Cisco ISR routers, Cisco Umbrella, Cisco Secure Endpoint, Cisco Secure Email, Cisco Access by Duo, Cisco Identity Service Engine (ISE), Cisco AnyConnect (VPN), Microsoft Azure Multifactor Authentication, and at least one enterprise SIEM platform.
• Signature Development: Develop and deploy signatures (e.g., YARA, Snort, Suricata, HIPS) and maintain an understanding of mobile technology and OS (i.e., Android, iOS, Windows), VMware technology, and Unix and basic Unix commands.

• Bachelor’s degree in computer science, Information Security , or a closely related field; OR combination of education and related work experience with a total of 4 years; Advanced degree is preferred.
• Must have a minimum of 5 years of experience with 2 years in managerial or leadership roles.
• Certifications:
  1. Certified Information Systems Security Professional (CISSP) from (ISC)² is required.
  2. Microsoft Certified: Azure Cybersecurity Architect Expert is required.
  3. Additional certifications from Amazon, Cisco, Red Hat, VMware etc. are strongly preferred.
• Must have in-depth knowledge of cybersecurity principles, technologies, and best practices, including network security, encryption, access control, and intrusion detection/prevention systems.
• Must have an understanding of industry regulations and compliance frameworks relevant to airport operations.
• Must have excellent leadership, communication, and interpersonal skills, with the ability to inspire and motivate team members and collaborate effectively with stakeholders.
• Must have strong analytical and problem-solving skills, with the ability to analyze security data and make data-driven decisions to improve security.
• Must be committed to continuous learning and staying updated on emerging threats, technologies, and best practices in cybersecurity.
• Must have meticulous attention to detail and a focus on accuracy and precision in all aspects of cybersecurity operations and compliance efforts.
• Must have proven ability to manage multiple projects simultaneously and prioritize tasks effectively.
• Must have demonstrated ability to work in a diverse and inclusive environment that fosters non-discrimination.
• A valid State of Ohio Driver License is required.
• Must successfully complete a Transportation Security Administration (TSA) 10-year fingerprint-base Criminal History Records Check and employment background check and Security Threat Assessment.
• Must be able to pass a pre-employment physical and drug test.
• Must be able to lift and carry thirty-five (35) pounds.

• Technology Management: Keeps up to date on technological developments. Makes effective use of technology to achieve results. Ensures access to, and security of, technology systems.
• Financial Management: Understands the organization’s financial processes, as related to their role. Prepares, justifies, and administers the program budget; or assists with these duties. Oversees, or assists with, procurement and contracting to achieve desired results. Monitors expenditures and uses cost-benefit thinking to set priorities.
• Creativity / Innovation: Develops new insights into situations; questions conventional approaches; encourages new ideas and innovations; designs and implements new, efficient/effective programs/processes.
• Partnering: Develops networks and builds alliances; collaborates across boundaries to build strategic relationships and achieve common goals.

• Team Building: Inspires and fosters team commitment, spirit, pride, and trust. Facilitates cooperation and motivates team members to accomplish group goals.
• Customer Service: Anticipates and meets the needs of both internal and external customers. Delivers high-quality products and services; is committed to continuous improvement.
• Technical Credibility: Understands and appropriately applies principles, procedures, requirements, regulations, and policies related to specialized expertise relevant to their division.
• Accountability: Holds self and others accountable for measurable high-quality, timely, and cost-effective results. Accepts responsibility for mistakes. Complies with established control systems and rules.
• Decisiveness: Makes well-informed, effective, and timely decisions, even when data is limited, or solutions produce unpleasant consequences; perceives the impact and implications of decisions.
• Influencing / Negotiating: Persuades others; builds consensus through give and take; gains cooperation from others to obtain information and accomplish goals.

• Integrity/Honesty: Behaves in an honest, fair, and ethical manner. Shows consistency in words and actions. Model’s high standards of ethics.
• Interpersonal Skills: Treats others with courtesy, sensitivity, and respect. Considers and responds appropriately to the needs and feelings of different people in different situations.
• Continual Learning: Assesses and recognizes own strengths and weaknesses; pursues self-development.
• Resilience: Deals effectively with pressure; remains optimistic and persistent, even under adversity. Recovers quickly from setbacks.
• Oral Communication: Makes clear and convincing oral presentations. Listens effectively; clarifies information as needed.
• Written Communication: Writes in a clear, concise, organized, and convincing manner for the intended audience.
• Flexibility: Is open to change and new information; rapidly adapts to new information, changing conditions, or unexpected obstacles.
• Problem Solving: Identifies and analyzes problems; weighs relevance and accuracy of information; generates and evaluates alternative solutions; makes recommendations.