Information Security Officer Jobs in New York
Information Security Officer jobs in New York represent one of the most active markets in the country, with demand concentrated across financial services, healthcare, technology, and government contracting and openings at every level from junior analyst to chief information security officer. The heaviest hiring is in New York City, Albany, and Buffalo, where institutions like JPMorgan Chase, Northwell Health, and IBM have longstanding security operations. The most sought-after specialties in New York listings are cloud security, risk and compliance, and identity and access management. Find a role that fits below and apply directly.
Find JobsOverview
Showing 5 of 11+ Information Security Officer jobs
Chief Information Security Officer
- DEPT OF ENVIRONMENT PROTECTION
Posted on
10/01/2026
- Full-time
Location
QUEENS
- No exam required
Department
Distributed IT - BWT
Save
Job Description
The New York City Department of Environmental Protection (NYC DEP) Business Information Technology (BIT) division is responsible for providing quality business, technical, and information technology system support to agency users. This commitment is achieved through collaboration, strong relationships, and a unified vision with DEP partners to deliver technology solutions that support the agency’s operational needs. Providing these services ensures that DEP continues its tradition of delivering excellent service to the residents of New York City.
Reporting to the Chief Information Officer (CIO), the Business Information Technology team seeks to hire a Chief Information Security Officer (CISO). Responsibilities include cybersecurity strategy, architecture, solutions design, program coordination and execution, awareness and outreach, business management, and reporting on the effectiveness of the information security program. This position requires a seasoned leader with strong business acumen and a detailed working knowledge of information security technologies, practices, and policies and their application in a business environment. The CISO will research and recommend innovative solutions and improvements to existing procedures. The CISO is an implementer who possesses the poise and ability to act calmly and competently in high-pressure situations. This role is responsible for developing and managing strong strategic relationships within Information Technology (IT) and ensuring that projects, initiatives, and security platforms meet all required security standards.
Under varying levels of executive direction, with latitude for independent initiative, judgment, and decision making, the selected candidate will develop and implement the organization’s information security strategy to protect data and systems from cyber threats. The CISO will safeguard information system assets by identifying security risks, threats, and vulnerabilities affecting networks, systems, and applications across new and existing technology initiatives, the selected candidate will evaluate high-level information technology initiatives and provide technical guidance to ensure compliance with security policies, standards, and guidelines. Responsibilities include developing, implementing, enforcing, and communicating security policies and plans covering data, software applications, hardware, and telecommunications systems.
The role requires in-depth knowledge of Internet Protocol (IP) networking and networking protocols, along with security technologies including encryption, Internet Protocol Security (IPsec), Public Key Infrastructure (PKI), Virtual Private Networks (VPNs), firewalls, proxy services, Domain Name System (DNS), electronic mail systems, privileged access management, and access lists. Experience with Operational Technology (OT) networks and Supervisory Control and Data Acquisition (SCADA) environments is also required.
The candidate will serve as a recognized subject matter expert in internet, web, application, and network security engineering, including vulnerability assessments, network scanning, and threat surface analysis. The role also requires advanced knowledge of cloud service security models and enterprise data protection strategies, including backup architecture, disaster recovery planning, and business continuity frameworks.
The candidate will oversee the system’s cybersecurity program and also support the new NYS Cybersecurity requirements for water and wastewater.
The candidate must have:
- Proven knowledge of core cybersecurity principles, including the ability to understand, interpret, and apply cybersecurity policies, standards, and regulatory requirements.
- Practical, hands-on experience in system protection or risk management, demonstrating the ability to identify security risks, evaluate vulnerabilities, and support incident response activities.
- Experience implementing or supporting cybersecurity programs in environments involving critical infrastructure, public utilities, operational technology (OT), or similar high-risk systems.
- The capability to serve as the responsible authority for developing, maintaining, and ensuring compliance with the system’s cybersecurity program.
Essential Job Functions:
- Lead the development, coordination, and submission of materials required to maintain compliance with the New York State Cybersecurity Regulations for Public Water Systems.
- Manage and direct a team of information technology security professionals, providing leadership, guidance, and support.
- Manage cybersecurity incidents and attacks in coordination with the team and oversight agencies such as New York City Cyber Command (NYC Cyber Command).
- Track cyber security incidents and vulnerability reports, direct teams for remediation of issues.
- Design a critical response process for cyber security incidents.
- Continuously monitor threats to DEP’s information technology (IT) and operational technology (OT) environments.
- Develop cybersecurity Key Risk Indicators (KRIs) and dashboard metrics for reporting.
- Develop and document cybersecurity policies, procedures, and standards in alignment with Citywide Information Security Policies.
- Coordinate air-gapped backup strategies with agency business units.
- Participate in annual financial and technology audits for the agency.
- Examine computer systems to ensure secure operation and protection of data from internal and external threats.
- Perform security assessments to ensure compliance with security policies, procedures, and industry standards.
- Monitor, evaluate, and maintain security systems according to industry best practices to safeguard internal systems and databases.
- Assist with the review and definition of security requirements and evaluate systems for compliance with established standards.
- Investigate security violations and breaches and prepare reports on incidents and intrusions as required.
- Review and assess firewall logs and configure firewalls, intrusion detection systems, and other network security devices.
- Work with other BIT teams to design and implement cybersecurity solutions across DEP infrastructure, networks, and systems.
- Develop necessary budget analysis and related documentation for annual submissions of budget for cyber-security related solutions.
EXECUTIVE PROGRAM SPECIALIST ( - 13393
Minimum Qualifications
1. A bachelor’s degree from an accredited college and 4 years of satisfactory experience of a nature to qualify for the duties and responsibilities of the position, at least 18 months of which must have been in an administrative, managerial, consultative, or executive capacity or supervising personnel performing activities related to the duties of the position; or 2. A combination of education and/or experience equivalent to "1" above. However, all candidates must have the 18 months of administrative, managerial, executive, consultative or supervisory experience described in "1" above.
Preferred Skills
- Strong knowledge of information security principles and cybersecurity technologies. - Experience with risk management frameworks and security policy development. - Hands on system administration and network security skills. - Proficiency in network troubleshooting, firewalls, protocols, routers, and switches. - Ability to design and maintain secure SCADA systems.
Public Service Loan Forgiveness
As a prospective employee of the City of New York, you may be eligible for federal loan forgiveness programs and state repayment assistance programs. For more information, please visit the U.S. Department of Education’s website at https://studentaid.gov/pslf/
Residency Requirement
New York City residency is generally required within 90 days of appointment. However, City Employees in certain titles who have worked for the City for 2 continuous years may also be eligible to reside in Nassau, Suffolk, Putnam, Westchester, Rockland, or Orange County. To determine if the residency requirement applies to you, please discuss with the agency representative at the time of interview.
Additional Information
The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.
Save
Job ID
789389
Posted until
11/30/2026
Title code
13393
Civil service title
EXECUTIVE PROGRAM SPECIALIST (
Title classification
Exempt-4
Business title
Chief Information Security Officer
- Experience level: Executive
Job level
M3
Number of positions
1
Work location
59-17 Junction Blvd Corona Ny
- Category: Technology, Data & Innovation
Chief Information Security Officer
Chief Information Security Officer
- DEPT OF ENVIRONMENT PROTECTION
Posted on
10/01/2026
- Full-time
Location
QUEENS
- No exam required
Department
Distributed IT - BWT
Save
Job Description
The New York City Department of Environmental Protection (NYC DEP) Business Information Technology (BIT) division is responsible for providing quality business, technical, and information technology system support to agency users. This commitment is achieved through collaboration, strong relationships, and a unified vision with DEP partners to deliver technology solutions that support the agency’s operational needs. Providing these services ensures that DEP continues its tradition of delivering excellent service to the residents of New York City.
Reporting to the Chief Information Officer (CIO), the Business Information Technology team seeks to hire a Chief Information Security Officer (CISO). Responsibilities include cybersecurity strategy, architecture, solutions design, program coordination and execution, awareness and outreach, business management, and reporting on the effectiveness of the information security program. This position requires a seasoned leader with strong business acumen and a detailed working knowledge of information security technologies, practices, and policies and their application in a business environment. The CISO will research and recommend innovative solutions and improvements to existing procedures. The CISO is an implementer who possesses the poise and ability to act calmly and competently in high-pressure situations. This role is responsible for developing and managing strong strategic relationships within Information Technology (IT) and ensuring that projects, initiatives, and security platforms meet all required security standards.
Under varying levels of executive direction, with latitude for independent initiative, judgment, and decision making, the selected candidate will develop and implement the organization’s information security strategy to protect data and systems from cyber threats. The CISO will safeguard information system assets by identifying security risks, threats, and vulnerabilities affecting networks, systems, and applications across new and existing technology initiatives, the selected candidate will evaluate high-level information technology initiatives and provide technical guidance to ensure compliance with security policies, standards, and guidelines. Responsibilities include developing, implementing, enforcing, and communicating security policies and plans covering data, software applications, hardware, and telecommunications systems.
The role requires in-depth knowledge of Internet Protocol (IP) networking and networking protocols, along with security technologies including encryption, Internet Protocol Security (IPsec), Public Key Infrastructure (PKI), Virtual Private Networks (VPNs), firewalls, proxy services, Domain Name System (DNS), electronic mail systems, privileged access management, and access lists. Experience with Operational Technology (OT) networks and Supervisory Control and Data Acquisition (SCADA) environments is also required.
The candidate will serve as a recognized subject matter expert in internet, web, application, and network security engineering, including vulnerability assessments, network scanning, and threat surface analysis. The role also requires advanced knowledge of cloud service security models and enterprise data protection strategies, including backup architecture, disaster recovery planning, and business continuity frameworks.
The candidate will oversee the system’s cybersecurity program and also support the new NYS Cybersecurity requirements for water and wastewater.
The candidate must have:
- Proven knowledge of core cybersecurity principles, including the ability to understand, interpret, and apply cybersecurity policies, standards, and regulatory requirements.
- Practical, hands-on experience in system protection or risk management, demonstrating the ability to identify security risks, evaluate vulnerabilities, and support incident response activities.
- Experience implementing or supporting cybersecurity programs in environments involving critical infrastructure, public utilities, operational technology (OT), or similar high-risk systems.
- The capability to serve as the responsible authority for developing, maintaining, and ensuring compliance with the system’s cybersecurity program.
Essential Job Functions:
- Lead the development, coordination, and submission of materials required to maintain compliance with the New York State Cybersecurity Regulations for Public Water Systems.
- Manage and direct a team of information technology security professionals, providing leadership, guidance, and support.
- Manage cybersecurity incidents and attacks in coordination with the team and oversight agencies such as New York City Cyber Command (NYC Cyber Command).
- Track cyber security incidents and vulnerability reports, direct teams for remediation of issues.
- Design a critical response process for cyber security incidents.
- Continuously monitor threats to DEP’s information technology (IT) and operational technology (OT) environments.
- Develop cybersecurity Key Risk Indicators (KRIs) and dashboard metrics for reporting.
- Develop and document cybersecurity policies, procedures, and standards in alignment with Citywide Information Security Policies.
- Coordinate air-gapped backup strategies with agency business units.
- Participate in annual financial and technology audits for the agency.
- Examine computer systems to ensure secure operation and protection of data from internal and external threats.
- Perform security assessments to ensure compliance with security policies, procedures, and industry standards.
- Monitor, evaluate, and maintain security systems according to industry best practices to safeguard internal systems and databases.
- Assist with the review and definition of security requirements and evaluate systems for compliance with established standards.
- Investigate security violations and breaches and prepare reports on incidents and intrusions as required.
- Review and assess firewall logs and configure firewalls, intrusion detection systems, and other network security devices.
- Work with other BIT teams to design and implement cybersecurity solutions across DEP infrastructure, networks, and systems.
- Develop necessary budget analysis and related documentation for annual submissions of budget for cyber-security related solutions.
EXECUTIVE PROGRAM SPECIALIST ( - 13393
Minimum Qualifications
1. A bachelor’s degree from an accredited college and 4 years of satisfactory experience of a nature to qualify for the duties and responsibilities of the position, at least 18 months of which must have been in an administrative, managerial, consultative, or executive capacity or supervising personnel performing activities related to the duties of the position; or 2. A combination of education and/or experience equivalent to "1" above. However, all candidates must have the 18 months of administrative, managerial, executive, consultative or supervisory experience described in "1" above.
Preferred Skills
- Strong knowledge of information security principles and cybersecurity technologies. - Experience with risk management frameworks and security policy development. - Hands on system administration and network security skills. - Proficiency in network troubleshooting, firewalls, protocols, routers, and switches. - Ability to design and maintain secure SCADA systems.
Public Service Loan Forgiveness
As a prospective employee of the City of New York, you may be eligible for federal loan forgiveness programs and state repayment assistance programs. For more information, please visit the U.S. Department of Education’s website at https://studentaid.gov/pslf/
Residency Requirement
New York City residency is generally required within 90 days of appointment. However, City Employees in certain titles who have worked for the City for 2 continuous years may also be eligible to reside in Nassau, Suffolk, Putnam, Westchester, Rockland, or Orange County. To determine if the residency requirement applies to you, please discuss with the agency representative at the time of interview.
Additional Information
The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.
Save
Job ID
789389
Posted until
11/30/2026
Title code
13393
Civil service title
EXECUTIVE PROGRAM SPECIALIST (
Title classification
Exempt-4
Business title
Chief Information Security Officer
- Experience level: Executive
Job level
M3
Number of positions
1
Work location
59-17 Junction Blvd Corona Ny
- Category: Technology, Data & Innovation
Chief Information Security Officer
See All 11 Information Security Officer Jobs in New York
Find roles in New York that match your experience and apply in just a few clicks.
Find JobsInformation Security Officer Jobs by City in New York
Where New York roles are concentrated, by current openings.
Information Security Officer Job Market in New York
A snapshot from current New York openings, updated as new roles post.
Who's Hiring
Top Industries Hiring
- Banking & Financial Services
What New York Employers Look For
The qualifications that appear most often in information security officer jobs across New York.
- Bachelor's degree in cybersecurity, computer science, information systems, or a closely related field
- Active CISSP, CISM, or equivalent professional security certification widely required by New York employers
- Five or more years of progressive experience in information security, risk management, or IT infrastructure
- Demonstrated experience developing and enforcing enterprise security policies and incident response plans
- Proficiency with NIST, ISO 27001, and New York DFS Cybersecurity Regulation compliance frameworks
- Strong communication skills to brief executive leadership, boards, and regulatory stakeholders on security posture
Information Security Officer Jobs in New York: Frequently Asked Questions
How do you become a information security officer in New York?
Most information security officers in New York enter through a combination of a bachelor's degree in cybersecurity or a related field and professional certification, with the CISSP or CISM being the credentials employers most consistently require. New York has no state-issued license for this role, but large employers and regulated industries such as banking and healthcare often require compliance with the New York Department of Financial Services Cybersecurity Regulation, making familiarity with that framework a practical prerequisite.
How much do information security officers make in New York?
Information security officers in New York earn a median of about $134,660 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $83,110 for the lowest 10% to over $216,220 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire information security officers in New York?
Employers hiring information security officers in New York right now include Danaher, CAIS, and DriveWealth, based on current listings on Migrate Mate as of October 2026. New York's concentration of regulated financial institutions, major hospital networks, and state government agencies means demand for this role is consistent across both private and public sector employers.
Which New York cities have the most information security officer jobs?
New York, Queens, and White Plains have the most information security officer openings in New York. New York City dominates due to its dense concentration of global financial firms, large hospital systems, and corporate headquarters, while Albany draws demand from state government agencies and technology contractors, and Buffalo has grown as an emerging hub for regional banks and healthcare networks.
Are there remote information security officer jobs in New York?
Yes, and more than many comparable roles, since a significant portion of information security work involves policy, analysis, and system monitoring that can be done off-site. About 83% of information security officer openings tied to New York are remote or hybrid as of October 2026, reflecting employer flexibility for non-operational functions. Roles involving hands-on infrastructure oversight, sensitive regulated environments, or in-person executive briefings are more likely to require on-site presence.
How can I get hired as a information security officer in New York with little or no experience?
The most realistic entry path is moving from an adjacent IT role such as systems administrator, network analyst, or IT auditor, then pursuing a CompTIA Security+ or similar certification to signal security competence. Large New York employers including major banks, hospital systems, and state agencies regularly hire junior security analysts who grow into officer-level roles. Aligning early work with New York DFS Cybersecurity Regulation compliance tasks is a practical differentiator that signals readiness for the regulatory expectations unique to this market.
Where can I find and apply to information security officer jobs in New York?
You can find and apply to information security officer jobs in New York on Migrate Mate, which lists current New York openings updated regularly. Search for roles by city or specialty, find the ones that fit your experience and focus area, and apply directly to the employer without any extra steps.
See All 11 Information Security Officer Jobs in New York
Find roles in New York that match your experience and apply in just a few clicks.
Find Jobs