IT Security and Compliance Administrator

<strong>Salary :</strong> $83,811.52 - $88,223.20 Annually<br><strong>Location :</strong> Toledo, OH<br><strong>Job Type:</strong> Full-Time<br><strong>Job Number:</strong> 2025-00087PROMO<br><strong>Department:</strong> Information Technology<br><strong>Opening Date:</strong> 05/20/2025<br><strong>Closing Date:</strong> 7/31/2025 11:59 PM Eastern<br> <br><strong>Description</strong><br>To apply for this promotion, click <br><br><strong>POSITION SUMMARY:</strong><br><br>The IT Security and Compliance Administrator performs two core functions for the City of Toledo. The first is the day-to-day operations of the in-place security solutions while the second is the identification, investigation, and resolution of security breaches detected by those systems. Secondary tasks may include involvement in the implementation of new security solutions, participation in the creation and or maintenance of policies, standards, baselines, guidelines, and procedures as well as conducting vulnerability audits and assessments. The IT Security and Compliance Administrator is expected to be fully aware of the City of Toledo's security goals as established by its stated policies, procedures, and guidelines and to actively work towards upholding those goals.<br><br><strong>ESSENTIAL JOB FUNCTIONS: </strong><br><br><strong>Strategy & Planning</strong><br><ul><li>Participate in the planning and design of city's security architecture, under the direction of the IT Infrastructure Manager, where appropriate. </li><li>Participate in the development of city-wide security documents (policies, standards, baselines, guidelines, and procedures) under the direction of the IT Infrastructure Manager, or Director where appropriate. </li><li>Participate in the planning and design of the city's business continuity plan, incident response plan and technology recovery plan, under the direction of the IT Infrastructure Manager or Director where appropriate. </li></ul><br><strong>Acquisition & Deployment</strong><br><ul><li>Maintain up to date detailed knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes, and the development of new attacks and threat vectors.</li><li>Recommend additional security solutions or enhancements to existing security solutions to improve overall security.</li><li>Perform the deployment, integration, and initial configuration of all new security solutions of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the city's security documents specifically. </li></ul><br><strong>Operational Activity</strong><br><ul><li>Maintain up to date dateline baselines for the secure configuration and operations of all in place devices, whether they be under direct control (i.e., security tool) or not (e.g., workstations, servers, network devices)</li><li>Maintain operational configurations of all in pace security solutions as per the established baselines. </li><li>Monitor all in place security solutions for efficient and appropriate operations</li><li>Review logs and reports of all in place devices, whether they be under direct control (i.e. security tools) or not (e.g. workstations, servers, network devices). Interpret the implications of that activity and devise plans for appropriate resolution.</li><li>Participate in investigations into problematic activity.</li><li>Serve as the primary resource for compliance tracking and audits.</li><li>Participate in the design and execution of vulnerability assessments, penetration tests, and security audits. </li><li>Provide on call support for end users for all in place security solutions.</li><li>Serve as the Infrastructure team lead as requested by the Infrastructure Manager or Director as requested.</li></ul>REQUIRED KNOWLEDGE, SKILLS AND ABILITIES:<br><br><strong>Knowledge of:</strong><br><ul><li>Technical infrastructure, networks, databases and systems in relation to IT Security and IT risks.</li><li>IT compliance assessments.</li><li>IT security controls.</li><li>Security systems including anti-virus applications, content filtering, firewalls, identity management and intrusion detection.</li><li>Protocols like TCP/IP, DNS, HTTP/S, etc., and tools like Wireshark to analyze traffic.</li><li>Navigating and using both <strong>Windows</strong> and <strong>Linux</strong> (command line especially for Linux).</li><li>Antivirus, EDR (Endpoint Detection and Response), and how to check alerts/logs from them.</li></ul><br><br><strong>Skill in:</strong><br><ul><li>Tools like <strong>Splunk</strong>, <strong>QRadar</strong>, <strong>LogRhythm</strong>, or <strong>Microsoft Sentinel</strong> to review logs and alerts.</li><li>Workflow/ticketing tools like <strong>ServiceNow</strong> or <strong>JIRA</strong> to track incidents and issues.</li></ul><br><strong>Ability to:</strong><br><ul><li>Read and understand logs from firewalls, servers, and endpoints to spot anomalies.</li><li>Work with individuals of diverse backgrounds.</li><li>Establish and maintain effective working relationships with subordinates, peers, superiors, vendor representatives and clients.</li><li>Multi-task in a fast-paced environment.</li></ul><br><strong>REQUIRED EDUCATION, EXPERIENCE, AND CERTIFICATIONS:</strong><br><ul><li>Bachelor's degree in Information Systems, Computer Science, Information Security, or a related field.</li><li>Four (4) years of IT security or network support with security component with a proven ability to engage with IT Management and regulators <strong>AND </strong>one (1) year of experience managing or collaborating with external service providers.</li><li>Must obtain any of the following certifications within one year of appointment:<ol><li>CompTIA Security+, Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), and Certified Information Security Manager (CISM). </li></ol></li></ul><br><strong>PREFERRED EDUCATION, EXPERIENCE AND CERTIFICATIONS:</strong><br><ul><li>None</li></ul><br><strong>PHYSICAL DEMANDS:</strong><br><br><strong>The physical demands described within this job description must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.</strong><br><br>In this position, the employee will continuously stand, walk, and sit. The position will occasionally require the employee to drive a personal and company owned vehicle. The employee will frequently lift and carry up to 25 pounds. Frequent stooping, kneeling, twisting, and crouching may occur with this position. Speaking and listening are constant essential functions of this position.<br><br><strong>WORK ENVIRONMENT:</strong><br><br><strong>The work environment described within this job description will be encountered while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.</strong><br><br>The employee is continuously indoors. Occasionally this employee will work outdoors and will travel to multiple worksites. At times, this position will require extended work hours. The noise level in the work environment is usually low; however, occasional moderate background noise can occur.<br><br>Class Code: Administrator-Administrative Services 2 (7321)<br><b>The City of Toledo provides excellent health and retirement benefits for its employees.</b><br><br><b>Health Insurance</b><br><br>The City of Toledo is a self-funded medical plan provider that offers a broad network of health services options for its employees. The City also offers a multi-tiered prescription drug plan and dental and vision care services.<br><br>Employees are required to pay a monthly premium depending on the employee's selection of single, single plus one, or family coverage. Coverage is also afforded for qualifying domestic partners, depending on the employee's bargaining unit. Monthly co-premiums are determined by collective bargaining agreement or Municipal Code. <br><br><b>Group Life Insurance</b><br><br>City employees are covered by a group life insurance plan depending on collective bargaining agreement or Municipal Code.<br><br><b>Ohio Public Employees Retirement Plan </b><br><br>The City is a member of the Ohio Public Employees Retirement Plan (OPERS). All employees who are paid in whole or in part by the state of Ohio, a county, municipality, or any other political subdivision of state or local government in Ohio must become members of OPERS unless they are covered by another state retirement system in Ohio. <br>OPERS is a pension plan providing fixed retirement benefits every month based on a formula that rewards years of service. The City contributes 14.00% of the employee's annual base salary and employees contribute 10.00% of their annual base salary.<br>For more information about OPERS, click on this link: https://www.opers.org/<br><b>Deferred Compensation & 401(K) </b><br><br>The City of Toledo offers a voluntary governmental 457(b) deferred compensation plan, which is a retirement savings plan that allows eligible employees to supplement any existing retirement/pension benefits by saving and investing pre-tax dollars through salary deferral.<br>Contributions and any earnings are tax-deferred (both federal and state income taxes) until money is withdrawn. Withdrawals are taxed at ordinary income levels. <br>For more information about the Ohio Deferred Compensation click on this link: https://www.ohio457.org/iApp/tcm/ohio457/index.jsp<br><br><b>401(k) </b><br><br>The City of Toledo offers a voluntary pre-tax savings contributions retirement plan. The plan is commonly referred to as a 401(k). <br>Under the 401(k) plan, an employee's retirement savings contributions are deducted from the employee's paycheck before taxation. The City does not make contributions on the employee's behalf. (Contributions are tax-deferred until withdrawn during retirement). Annual contributions to the 401(k) plan are limited to a maximum pre-tax annual contribution, as established by Internal Revenue Service regulations.<br><b>Roth 401(k)</b><br>The City of Toledo also offers a voluntary post-tax savings contributions retirement plan. This plan is commonly referred to as a Roth 401(k) Plan. <br>Under a Roth 401(k) Plan, an employee's retirement savings contributions are deducted from the employee's paycheck on a post-tax basis. Annual contributions to the Roth 401(k) plan are limited to a maximum post-tax annual contribution, as established by the Internal Revenue Service.<br>01 <br> <br> Are you currently employed by the City of Toledo? <ul> <li>Yes</li> <li>No</li> </ul> <br>02 <br> <br> If you are currently employed by the City of Toledo, please list your Division. <br>03 <br> <br> What is your highest level of education? <ul> <li>Doctorate or Professional Degree</li> <li>Master's Degree</li> <li>Bachelor's Degree</li> <li>Associate's Degree</li> <li>Some College</li> <li>High School Diploma or G.E.D.</li> <li>None of the above</li> </ul> <br>04 <br> <br> If you have a Bachelor's Degree or higher, please list the major and any concentrations of your Degree? <br>05 <br> <br> How many years of experience do you have in IT security or network support with security component with a proven ability to engage with IT Management and regulators ? <ul> <li>Less than one (1) year of experience.</li> <li>More than one (1), but less than two (2) years of experience.</li> <li>More than two (2), but less than three (3) years of experience.</li> <li>More than three (3), but less than four (4) years of experience.</li> <li>More than four (4) years of experience.</li> </ul> <br>06 <br> <br> Describe your experience in IT security or network support with security component with a proven ability to engage with IT Management and regulators . <br>07 <br> <br> How many years of experience do you have in managing or collaborating with external service providers? <ul> <li>Less than one (1) year of experience.</li> <li>More than one (1) year of experience, but less than two (2) years of experience.</li> <li>More than two (2) years of experience, but less than three (3) years of experience.</li> <li>More than three (3) years of experience, but less than four (4) years of experience.</li> <li>More than four (4) years of experience</li> </ul> <br>08 <br> <br> Describe your experience in managing and collaborating with external service providers. <br>Required Question

Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...