Security Manager

The Security Manager is responsible for leading the county's cybersecurity operations, ensuring the protection of critical systems, networks, and data. This role develops and implements strategic security plans, enforces policies aligned with NIST CSF 2.0 and Florida Statutes, and oversees enterprise risk management and compliance efforts. The position directs incident response, manages security technologies and vendors, and drives staff training and awareness programs. Serving as a key advisor to executive leadership, the Security Manager ensures the county maintains a strong cybersecurity posture through proactive risk mitigation, governance, and continuous improvement.

The location for this full-time, exempt position is Lecanto, Florida.

• Lead and Oversee Security Operations : Direct and coordinate the activities of the cybersecurity team, including Security Analysts, to ensure effective protection of county systems, networks, and data.
• Develop and Implement Strategic Security Plans : Establish long-term security strategies, roadmaps, and budgets aligned with organizational goals and regulatory requirements.
• Policy and Governance Leadership : Develop, approve, and enforce county-wide information security policies, standards, and procedures. Ensure alignment with NIST CSF 2.0 and applicable Florida Statutes.
• Risk Management and Compliance Oversight : Oversee enterprise-wide risk assessments as applies to technology and maintaining the Risk Register. Ensure Systems Management risk maps to the organizational Enterprise Risk Management System,
• Ensure compliance with local, state, and federal security regulations, and lead external / internal audit engagements.
• Incident Response Leadership, direct incident response activities, providing executive-level guidance, escalation management, and post-incident reviews to strengthen organizational resilience.
• Vendor and Technology Management : Evaluate, select, and manage third-party vendors, security tools, and technology solutions. Negotiate contracts to ensure effective and cost-efficient services.
• Training and Awareness Leadership : Oversee the development and execution of security awareness programs for county staff, ensuring a culture of cybersecurity responsibility.
• Disaster Recovery & Business Continuity Integration : Collaborate with IT leadership to ensure that security considerations are integrated into disaster recovery and business continuity plans.
• Security Metrics & Reporting : Establish performance metrics and regularly report to executive leadership and governing bodies on cybersecurity posture, incidents, risks, and program effectiveness.
• Leadership and Team Development : Mentor, train, and evaluate security staff, fostering professional growth and ensuring succession planning for critical roles.Completes performance evaluations, counsels staff and initiates commendations or disciplinary action when appropriate.
• Strategic Engagement & Communication : Act as the primary liaison for cybersecurity matters with executive leadership, external agencies, auditors, and law enforcement. Represent the county in cybersecurity forums and collaborative initiatives.
• Continuous Improvement : Stay current on evolving cyber threats, emerging technologies, and best practices to continuously enhance the organization's security maturity.
• Other Duties Assigned : Perform additional responsibilities necessary to ensure the integrity, confidentiality, and availability of county information systems.

Education, Training, and Experience

Skills and Abilities

Certificates, Licenses, Registration, Skills

IS-100.c : Introduction to the Incident Command System (ICS)

Physical Requirements / Work Environment

Emergency Response / Recovery Activities

Employee Benefits at a Glance :

Medical, Dental, Vision Insurance, Employee Health & Wellness Center, Florida Retirement System (FRS), Basic Term Life and AD&D Insurance $20,000, Long Term Disability Insurance, Employee Assistance Program (EAP), 11 Paid Holidays, Vacation and Sick Leave. Please visit the Benefits tab of this posting for additional information and a link to the Employee Benefits Highlights booklet.

Basis of Rating : Applications will be carefully reviewed to assess each individuals' qualifications. Selected persons will be interviewed to determine who will be hired for the job. The kind and length of related work experience, training and education shown on the application will be an important consideration in the screening process.

Must successfully pass a criminal background check, physical examination, and drug screen. Drug screens will be in accordance with the Drug Free Workplace Act and / or the Omnibus Transportation Employee Testing Act of 1991.

Citrus County, Florida supports a Drug-Free workplace. All employees are subject to reasonable suspicion drug testing in accordance with Section 112.0455, F.S., Drug-Free Workplace Act.

Citrus County, Florida Board of County Commissioners (BOCC), is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including gender identity, sexual orientation, and pregnancy), national origin, age (40 or older), marital status, citizenship, physical or mental disability, genetic information, veteran status, or any other protected trait.

Applicants requiring a reasonable accommodation, as defined by the Americans with Disabilities Act, must notify the Citrus County, Florida Board of County Commissioners in advance to allow sufficient time to provide an accommodation.

Pursuant to Chapter 295, Florida Statutes, candidates eligible for Veterans' Preference will receive preference in employment for vacancies and are encouraged to apply. Candidates claiming Veterans' Preference must attach supporting documentation with each submission that includes character of service (for example, DD Form 214) along with any other documentation as required by Rule 55A-7, Florida Administrative Code.

Pursuant to Chapter 119, Florida Statutes or the "Public Records Law," applications, resumes and personnel records are subject to public inspections. Details regarding the "Public Records Law" / "The Sunshine Law" / Florida Statutes and the statutory exemptions are available on websites such as the Florida Office of the Attorney General, Florida Senate and Florida Legislature. Additionally, Citrus County Board of County Commissioners Public Information section is located on our website.

J-18808-Ljbffr