Description
Directs the development and delivery of IT security and data privacy standards, best practices, architecture and systems to ensure information system security and data privacy across the institution. Implements processes and methods for auditing and addressing non-compliance to information security standards; facilitates migration of non-compliant environments to compliant environments. Conducts studies within and outside the organization to ensure compliance with standards and currency with industry security norms. Manages and participates in the planning and implementation of security administration for all IT projects. Responsible for evaluation and selection of security applications and systems. Makes recommendations and assists in the implementation of changes to work methods and procedures to make them more effective or to strengthen data privacy measures. The primary duty of employees in this classification is the management of a customarily recognized department or subdivision, including the supervision of three or more full-time equivalent employees every week. Direction is over a permanent status-continuing function, not a collection of employees assigned to complete a project. Management duties include interviewing, selecting and training of employees; setting and adjusting their rates of pay and hours of work; planning and directing their work; appraising their productivity and efficiency for the purpose of recommending promotions or other changes in their status; handling their complaints and grievances and disciplining them when necessary. Management responsibilities include the authority to hire, fire, or promote assigned employees or make recommendations that are given particular weight. Employees have impact on budgeting, controlling costs, planning, scheduling, and procedural change. Under FLSA, this is the exempt job classification for this title. Incumbents in this position must meet the full criteria for exempt status: salary level, salary basis, and duties tests.