Policies Before Passwords: The Case for Governance-Led Cyber Strategy

About the Role This is the highest level in the Engineer series for the City and County of San Francisco. Under general supervision, you will analyze, plan, implement, maintain, troubleshoot, and enhance large complex systems or networks. You may function as a supervisor, expert, or project leader, serving as a lead assistant technical architect and systems integrator for large-scale enterprise networking backbones. Key Responsibilities - Conceptualize, plan, and ensure the maintenance, design, implementation, and enhancement of commercial software, internally developed applications, and web services. - Oversee the customization of new features to software packages and internal applications according to end-user requests. - Oversee the day-to-day operations of various applications and the development of new applications based on customer requirements. - Design and write test plans, ensure application performance, lead the implementation of fixes, and lead product launches. - Provide leadership for technical support and lead the troubleshooting of application-related problems. - Lead and guide the writing of technical documentation and develop best practices for version control and testing. - Oversee software upgrades, track software licensing, and manage vendor relationships including scoping services and reviewing deliverables. Minimum Qualifications - Education: Possession of an associate degree in computer science, computer engineering, information systems, or a closely-related field from an accredited college or university. Equivalent course credits require at least 60 semester or 90 quarter units, with a minimum of 20 semester or 30 quarter units in the specified fields. - Experience: Five years of experience analyzing, installing, configuring, enhancing, and/or maintaining the components of an enterprise network. - Substitutions: Additional qualifying experience may substitute for the required degree on a year-for-year basis up to a maximum of two years. Completion of the 1010 Information Systems Trainee Program may also substitute for the degree. Special Requirements - Must complete a Supplemental Questionnaire to self-certify qualifications during the application process. - Must have access to a computer and reliable internet connection to take the online exam. - Department-specific requirements may apply based on placement: - San Francisco Airport: Requires TSA Security Clearance and Customs Access Seal. - Sheriff's Department: Requires security clearance issued by the Sheriff's Department. - Port Commission: Requires a Transportation Worker Identification Credential and insurability under the Port automobile liability policy. Selection Process 1. Supplemental Questionnaire: Candidates must complete this during the online application to self-certify qualifications. 2. Tech Engineer - Applications Core Exam (100% weight): An online, computer-administered test consisting of 25 questions to be completed within 60 minutes. It measures technical abilities such as web app development, troubleshooting, analytical thinking, and database knowledge. 3. Score Banking: Passing scores are banked for three years and can be applied to future related announcements. 4. Eligible List: Candidates who pass are placed on an eligible list for 12 months for certification and hiring purposes. How to Apply - Applications are accepted online only at https://careers.sf.gov/interest/tech/. - Select the Apply Now button at the top of the job ad and follow the on-screen instructions. - Ensure your registered email address is accurate and that emails from CCSF domains are not blocked by spam filters. Employment Details - Employer: City and County of San Francisco - Application Opening: May 25, 2022 (Reposted November 6, 2023) - Application Deadline: Continuous - Equal Opportunity: The city encourages women, minorities, and persons with disabilities to apply and considers all applicants regardless of protected categories.

About the Role The Principal Security Engineer is the highest level in the Engineer series, involving the analysis, planning, implementation, and enhancement of large complex systems or networks. The role may function as a supervisor, expert, or project leader, serving as a lead technical architect and systems integrator focused on securing vulnerabilities and reducing risk. Key Responsibilities - Architect, design, implement, maintain, and operate information system security controls and countermeasures. - Analyze and recommend security controls in the acquisition, development, and change management lifecycle of information systems. - Monitor information systems for security incidents and vulnerabilities, developing monitoring capabilities. - Oversee the response to security incidents, including investigation, countermeasures, and recovery from attacks. - Oversee the administration of authentication and access controls for user and system accounts. - Analyze trends in the threat and compliance environment, advising management on risk mitigation. - Oversee the development of information security governance, policies, procedures, and standards. - Oversee the development and administration of information security training and awareness programs. Minimum Qualifications - Education: An associate degree in computer science, computer engineering, information systems, or a closely-related field from an accredited college or university, requiring at least 60 semester or 90 quarter credits, with a minimum of 20 semester or 30 quarter credits in the specified fields. - Experience: Five years of experience analyzing, installing, configuring, enhancing, and/or maintaining the components of an enterprise network. - Substitution: Additional qualifying experience may substitute for the required degree on a year-for-year basis up to a maximum of two years. Completion of the 1010 Information Systems Trainee Program may also substitute for the degree. Special Requirements - San Francisco Airport positions require a TSA Security Clearance and a Customs Access Seal. - Sheriff's Department positions require a security clearance issued by the Sheriff's Department. - Port Commission positions require a Transportation Worker Identification Credential certificate and insurability under the Port's automobile liability insurance policy. Selection Process 1. Application submission and completion of a Supplemental Questionnaire to self-certify qualifications. 2. Tech Engineer - Security Core Exam: An online test measuring knowledge in security operations, engineering, network security, asset security, identity and access management, mobile security, and security assessment. 3. Placement on a confidential eligible list for 12 months upon passing the exam. How to Apply - Apply online only by visiting https://careers.sf.gov/interest/tech/. - Select Apply Now at the top of the job ad and follow the screen instructions. - Ensure your registered email address is accurate and unblocked to receive messages from SF government domains. - Retain the confirmation email received after successful submission. Employment Details - Employer: City and County of San Francisco. - Position Type: Continuous application deadline with Rule of the List certification. - Equal Employment Opportunity: The City encourages women, minorities, and persons with disabilities to apply, considering all applicants regardless of protected categories under the law.

About the Role - Assists in analyzing, planning, implementing, maintaining, troubleshooting, and enhancing large complex systems or networks. - The 1044 Principal Systems Engineer is the highest level in the Engineer series. - May function as a supervisor, expert, or project leader. - Serves as a lead technical architect and systems integrator for large complex systems or networks. Key Responsibilities 1. Oversees day-to-day operational support for server, storage, or network infrastructures. 2. Oversees building, patching, testing, and deployment of systems and platforms. 3. Oversees, plans, and implements changes to infrastructure to enhance performance. 4. Oversees storage and server data backup, data migration, and disaster recovery operations. 5. Oversees software and operating system upgrades and tracks system licensing. 6. Oversees configuration of security settings or access permissions. 7. Documents complex procedures and troubleshooting procedures related to systems and networks. 8. Configures, monitors, maintains, and oversees office and production software and utility software. 9. Evaluates and recommends new technologies, optimizes operational efficiency, and troubleshoots problems. 10. Participates in deployment of overall enterprise disaster recovery strategy. Minimum Qualifications - Education: Associate degree in computer science, computer engineering, information systems, or a closely-related field. - Experience: Five years of experience analyzing, installing, configuring, enhancing, and maintaining components of an enterprise network. - Substitution: Additional experience may substitute for the required degree on a year-for-year basis up to a maximum of two years. Completion of the 1010 Information Systems Trainee Program may also substitute for the degree. Special Requirements - Must complete a Supplemental Questionnaire as part of the online application process. - Must have access to a computer and reliable internet connection to take the online core exam. - San Francisco Airport positions require TSA Security Clearance and Customs Clearance. - Sheriff's Department positions require security clearance issued by the Sheriff's Department. - Port positions require a Transportation Worker Identification Credential and insurability under the automobile liability policy. Selection Process 1. Application Review: Candidates must complete the Supplemental Questionnaire and self-certify minimum qualifications. 2. Core Exam: Candidates take the online Tech Engineer - Systems Core Exam, which consists of 25 questions to be completed within 60 minutes. 3. Score Banking: Exam scores are banked for three years from the date of the examination. 4. Eligible List: Passing candidates are placed on an eligible list for 12 months under the Rule of the List certification rule. How to Apply - Submit an online application and Supplemental Questionnaire at the City career website. - Ensure your registered email address is accurate and not blocked by spam filters. - Retain the confirmation email received as proof of submission. Employment Details - Employer: City and County of San Francisco. - Recruitment: Continuous recruitment with no closing date. - Equal Opportunity: Encourages applications from women, minorities, and persons with disabilities. - Disaster Service Worker: All City employees are designated as Disaster Service Workers.

ABOUT THE ROLE The Campaign Finance Board (CFB) is seeking a Senior Director of Engineering to lead the engineering function behind New York City's public matching funds program, the Voter Guide, and campaign finance disclosure systems. This senior leadership role owns the multi-year technical roadmap, supervising software development, quality assurance, Salesforce engineering, and data engineering. The role involves turning around inconsistent engineering practices, managing technical debt, building a Salesforce engineering function from scratch, and eventually overseeing Infrastructure and Cybersecurity. KEY RESPONSIBILITIES - Build, supervise, and mentor a leadership team across engineering functions, establishing accountability and developing managerial capability. - Implement baseline people management practices including hiring, performance management, and retention strategies. - Foster an engineering culture prioritizing collaborative problem-solving, knowledge-sharing, and continuous improvement. - Expand knowledge and comfort with the software development lifecycle, agile processes, and product thinking in partnership with product leadership. - Set and track Key Performance Indicators (KPIs) and develop a multi-year technical roadmap aligned with agency goals. - Establish, document, and enforce engineering standards including coding standards, branching strategy, security policies, and architecture reviews. - Evaluate emerging technologies and recommend adoption decisions appropriate to public-sector constraints. - Lead the agency's software development and quality assurance functions, owning the software development lifecycle, DevOps, and CI/CD pipelines. - Own the technical implementation of AI use cases and evaluate model performance against capability, accuracy, latency, cost, and security. - Provide senior-level oversight of IT infrastructure and cybersecurity functions, ensuring alignment with citywide standards and leading disaster readiness planning. - Oversee data engineering build-and-operations, delivering secure, scalable data infrastructure and modern data architecture like data lakehouses and ETL/ELT pipelines. - Build an in-house Salesforce engineering function from the ground up, hire a Director of Salesforce Engineering, and establish procedures for bug fixes and enhancements. - Provide senior technical oversight of strategic technology vendors, holding them accountable for scope, quality, and delivery commitments. - Lead the agency's technical workforce development strategy, including reskilling programs and knowledge transfer from vendors to internal staff. MINIMUM QUALIFICATIONS 1. A bachelor's degree from an accredited college including or supplemented by at least twelve-semester credits in accounting, auditing, business or public administration, computer science, economics, finance, statistics, graphic design, personnel or human resources administration, user experience design, or a closely related area of study and one year of satisfactory full-time experience in a closely related field. 2. A four-year high school diploma or its educational equivalent and five years of experience as described in the first option. 3. Education and/or experience equivalent to the above options. SPECIAL REQUIREMENTS - Preferred qualifications include a bachelor's degree in computer science or related field (master's preferred) and 15+ years of progressive software engineering experience with at least 5 years in leadership roles. - Hands-on experience with Python-based development, cloud-native architecture, and modern CI/CD tooling is preferred. - Experience modernizing legacy systems, managing technical debt, and public-sector or civic tech leadership experience is preferred. - New York City residency is generally required within 90 days of appointment. - No civil service exam is required for this position. SELECTION PROCESS Candidates with preferred qualifications will be given preference in the selection process. Only candidates selected for an interview will be contacted. HOW TO APPLY Apply via SmartRecruiters. Candidates are invited to provide a cover letter via the attachment or the Message to the Hiring Team field. EMPLOYMENT DETAILS - Position Type: Full-Time, Pending Classification-2, Manager - Department: Managerial - Category: Technology, Data & Innovation - Work Location: 100 Church St., N.Y. (Manhattan) - Benefits: Comprehensive city benefits. - Loan Forgiveness: Eligible for federal Public Service Loan Forgiveness and state repayment assistance programs. - EEO Statement: The City of New York is an inclusive equal opportunity employer committed to a diverse workforce and a discrimination-free environment.

ABOUT THE ROLE The New York City Financial Information Services Agency and Office of Payroll Administration (FISA-OPA) is seeking a Lead IT Project Counsel. FISA-OPA operates as a state-of-the-art IT service center developing and managing applications for critical City financial, timekeeping, HR, and payroll functions. Under the direction of the General Counsel, the successful candidate will operate with wide latitude to negotiate and draft complex IT agreements, draft legal opinions, and policy statements. While focused on IT matters, the counsel will also handle EEO and disciplinary issues and represent the agency at hearings when necessary. KEY RESPONSIBILITIES - Lead complex transactions across strategic areas including advanced technology (software licenses, hardware, SaaS, cloud services, AI solutions, cybersecurity, digital platforms). - Work collaboratively with legal, technical, and business teams to meet agency needs. - Provide practical advice on IT-related legal issues, including data privacy and cybersecurity. - Review compliance with agency software and data licensing obligations. - Identify legal risks and develop strategies to mitigate and resolve them. - Ensure compliance with relevant laws and regulations. - Collaborate on data protection, breach response, and cybersecurity governance. - Provide strategic legal advice to support IT modernization and digital transformation. - Develop and update contract templates and negotiation guidelines for IT agreements. - Provide training to IT and business stakeholders on contracting principles and risk management. - Perform other duties such as FOIL responses, records requests, subpoenas, and data privacy reviews. MINIMUM QUALIFICATIONS - Admission to the New York State Bar. - Four years of recent full-time responsible, relevant, satisfactory legal experience subsequent to admission to any bar. - Eighteen months of the required experience must have been in the supervision of other attorneys in an administrative, managerial, or executive capacity, or performing highly complex and significant legal work. - Must remain a Member of the New York State Bar in good standing for the duration of employment. SPECIAL REQUIREMENTS - New York City residency is not required for this position. - Eligible for federal loan forgiveness programs and state repayment assistance programs (Public Service Loan Forgiveness). - 10-15 years of experience negotiating and completing complex, high value IT transactional matters independently (preferred). - Strong working knowledge of privacy, cybersecurity, and data governance (preferred). - Familiarity with software audit and compliance reviews (preferred). - Exceptional communication skills to translate complex legal and technical issues into clear advice (preferred). SELECTION PROCESS - No exam required. HOW TO APPLY - Apply online via the City of New York job portal using Job ID 788329 before the posting deadline of 09/26/2026. EMPLOYMENT DETAILS - Job Type: Full-Time - Location: 5 Manhattan West, Manhattan, NY - Department: ADM/Legal - Category: Technology, Data & Innovation - Experience Level: Manager - Job Level: M3 - Number of Positions: 1 - Civil Service Title: Executive Agency Counsel - Title Classification: Non-Competitive-5 - Title Code: 95005 - Equal Opportunity Employer: The City of New York is an inclusive equal opportunity employer committed to a diverse workforce.

About the Role This is the advanced journey level in the Engineer series for the City and County of San Francisco. Under general supervision, you will analyze, plan, implement, maintain, troubleshoot, and enhance large complex systems or networks. You will serve as a senior technical architect and systems integrator with a primary focus on securing vulnerabilities and reducing the risk of system compromises. This role requires highly specialized knowledge and the exercise of independent judgment. Key Responsibilities - Architect, design, implement, maintain, and operate information system security controls and countermeasures. - Analyze and recommend security controls in the acquisition, development, and change management lifecycles of information systems. - Monitor information systems for security incidents and vulnerabilities, develop monitoring capabilities, and report on trends. - Respond to security incidents, investigate attacks, and coordinate with third-party responders and law enforcement. - Administer authentication and access controls, including provisioning and deprovisioning of user and system accounts. - Analyze threat and compliance trends, advise management, execute mitigation plans, and perform risk assessments. - Develop information security governance, including organizational policies, procedures, standards, and guidelines. - Develop, administer, or provide oversight for information security training and awareness programs. Minimum Qualifications - Education: Possession of an associate degree in computer science, computer engineering, information systems, or a closely-related field. Equivalent course credits require at least 60 semester or 90 quarter units total, with a minimum of 20 semester or 30 quarter units in the specified fields. - Experience: Three years of experience analyzing, installing, configuring, enhancing, and/or maintaining the components of an enterprise network. - Substitutions: Additional qualifying experience may substitute for the required degree on a year-for-year basis up to a maximum of two years. Completion of the 1010 Information Systems Trainee Program may also substitute for the degree. Special Requirements - Must complete a Supplemental Questionnaire to self-certify qualifications during the application process. - Must have access to a computer and reliable internet connection to take the online exam. - Department-specific requirements may apply based on placement, including TSA Security Clearance and Customs Access Seal for the Airport Commission, Sheriff's Department security clearance, or a TWIC certificate for the Port Commission. Selection Process 1. Supplemental Questionnaire: Candidates must complete this during the online application to self-certify qualifications. 2. Tech Engineer - Security Core Exam (100% weight): An online, computer-administered test consisting of 20 questions to be completed within 50 minutes. It measures knowledge of security operations, engineering, network security, identity and access management, and security assessment. 3. Score Banking: Passing scores are banked for three years and can be applied to future related announcements. 4. Eligible List: Candidates who pass are placed on an eligible list for 12 months for certification and hiring purposes. How to Apply - Applications are accepted online only at https://careers.sf.gov/interest/tech/. - Select the Apply Now button at the top of the job ad and follow the on-screen instructions. - Ensure your registered email address is accurate and that emails from CCSF domains are not blocked by spam filters. Employment Details - Employer: City and County of San Francisco - Application Opening: May 25, 2022 (Reposted November 6, 2023) - Application Deadline: Continuous - Equal Opportunity: The city encourages women, minorities, and persons with disabilities to apply and considers all applicants regardless of protected categories.

About the Role - Assists in analyzing, planning, implementing, maintaining, troubleshooting, and enhancing large complex systems or networks. - The 1044 Principal Systems Engineer is the highest level in the Engineer series. - May function as a supervisor, expert, or project leader. - Serves as a lead technical architect and systems integrator for large complex systems or networks. Key Responsibilities 1. Oversees day-to-day operational support for server, storage, or network infrastructures. 2. Oversees building, patching, testing, and deployment of systems and platforms. 3. Oversees, plans, and implements changes to infrastructure to enhance performance. 4. Oversees storage and server data backup, data migration, and disaster recovery operations. 5. Oversees software and operating system upgrades and tracks system licensing. 6. Oversees configuration of security settings or access permissions. 7. Documents complex procedures and troubleshooting procedures related to systems and networks. 8. Configures, monitors, maintains, and oversees office and production software and utility software. 9. Evaluates and recommends new technologies, optimizes operational efficiency, and troubleshoots problems. 10. Participates in deployment of overall enterprise disaster recovery strategy. Minimum Qualifications - Education: Associate degree in computer science, computer engineering, information systems, or a closely-related field. - Experience: Five years of experience analyzing, installing, configuring, enhancing, and maintaining components of an enterprise network. - Substitution: Additional experience may substitute for the required degree on a year-for-year basis up to a maximum of two years. Completion of the 1010 Information Systems Trainee Program may also substitute for the degree. Special Requirements - Must complete a Supplemental Questionnaire as part of the online application process. - Must have access to a computer and reliable internet connection to take the online core exam. - San Francisco Airport positions require TSA Security Clearance and Customs Clearance. - Sheriff's Department positions require security clearance issued by the Sheriff's Department. - Port positions require a Transportation Worker Identification Credential and insurability under the automobile liability policy. Selection Process 1. Application Review: Candidates must complete the Supplemental Questionnaire and self-certify minimum qualifications. 2. Core Exam: Candidates take the online Tech Engineer - Systems Core Exam, which consists of 25 questions to be completed within 60 minutes. 3. Score Banking: Exam scores are banked for three years from the date of the examination. 4. Eligible List: Passing candidates are placed on an eligible list for 12 months under the Rule of the List certification rule. How to Apply - Submit an online application and Supplemental Questionnaire at the City career website. - Ensure your registered email address is accurate and not blocked by spam filters. - Retain the confirmation email received as proof of submission. Employment Details - Employer: City and County of San Francisco. - Recruitment: Continuous recruitment with no closing date. - Equal Opportunity: Encourages applications from women, minorities, and persons with disabilities. - Disaster Service Worker: All City employees are designated as Disaster Service Workers.

ABOUT THE ROLE A Systems Administrator evaluates, develops, maintains, implements, and modifies operating systems, hardware, middleware, software, storage, and networking in a business applications environment. This full-time position is available across all departments within the City of Los Angeles. KEY RESPONSIBILITIES - Perform hardware-software studies and design or implement systems architecture - Analyze systems problems and optimize systems performance - Perform systems upgrades - Follow ITIL and security best practices for incident, change, and release management - Manage all aspects of network and server operations - Provide technical assistance to data processing personnel and user divisions - Supervise and direct the work of employees engaged in these activities - Fulfill equal employment opportunity responsibilities MINIMUM QUALIFICATIONS Option 1: A bachelor's degree from an accredited four-year college or university AND two (2) years of full-time paid systems implementation experience in: 1. Installing, configuring, maintaining, performance tuning, patching, troubleshooting, and securing enterprise-level servers and networks 2. Planning, configuring, and implementing enterprise systems and applications over large computing networks serving local and remote facilities 3. Preparing programs by analyzing specifications, identifying computer processing requirements, coding programs, and evaluating software solutions Option 2: Two years of full-time paid experience with the City of Los Angeles as a Programmer Analyst Option 3: Four years of full-time paid systems implementation experience with the City of Los Angeles as a Systems Analyst with relevant enterprise server or network experience - Note: Additional full-time paid experience (as described in Option 1) may substitute on a year-for-year basis for the required bachelor's degree. SPECIAL REQUIREMENTS - Driver's License: A valid Class C California DMV driver's license is required at the time of appointment for specific departments (e.g., Animal Services, DWP, Public Works, ITA, Library, etc.). Disqualification may occur for three or more moving violations/at-fault accidents or a major moving violation conviction within the last 36 months. - Selective Certification: Some positions require specific professional certifications (e.g., AWS, CCIE, CCNP, CISSP, MCSE, Oracle, VMware, Red Hat, SAP, IBM). A copy of the Certificate of Completion must be attached to the online application BEFORE submission to be considered for selective certification. SELECTION PROCESS - Examination Weight: Multiple-Choice Test (100%) - Format: Weighted multiple-choice test administered and proctored online via webcam from a remote location. - Competencies Evaluated: Analytical Ability, Self-Management, Teamwork, Project Management, and Job Knowledge (servers, OS, programming languages, LAN/WAN/cloud networks, SAN/NAS, system optimization, disaster recovery, cybersecurity, etc.). - Anticipated Test Dates: Tuesday, November 10, 2026 to Monday, November 16, 2026 (for applicants filing between September 4 and September 17, 2026). - A final average score of 70% or higher is required for placement on the eligible list. - Candidates may take the test only once every 365 days. HOW TO APPLY - Method: Online applications only. - Website: https://www.governmentjobs.com/careers/lacity - Current Application Deadline: Friday, September 4, 2026 to Thursday, September 17, 2026 - Note: Filing may close without prior notice once a sufficient number of applications are received. Applicants are urged to apply early and attach qualifying degree or coursework to the online application to expedite the process. EMPLOYMENT DETAILS - Employer: City of Los Angeles - Location: Los Angeles, CA (All Departments) - Address: 700 East Temple Street, Room 100, Los Angeles, California, 90012 - Job Type: Full-Time - Benefits: Coverage (health, dental, life insurance) commences approximately six weeks after the original regular appointment. - Additional: All City employees are required to be Disaster Service Workers. The City is an Equal Employment Opportunity Employer and does not discriminate on any protected basis.