Job Title/Classification: Assistant Director (Various)

Working/Posting Title: Assistant Director, Business Information Security Officer

PURPOSE OF POSITION

The Southern California Regional Rail Authority (SCRRA), operator of the METROLINK Commuter Rail System, is seeking a Assistant Director, Business Information Security Officer (BISO) who will understand the key assets and processes, define and evolve cybersecurity strategy, identify and evaluate risks and controls, and suggest incremental controls or risk mitigation strategies where necessary. Additionally, the Assistant Director, BISO will ensure business compliance with Information Security Policies and Standards while continuously monitoring and reporting on risks and documented exceptions. The Assistant Director, BISO helps the business achieve their objectives while not compromising the security posture. The Assistant Director, BISO will work under the general direction of SCRRA’s Chief Technology Officer, and the position will collaborate with internal and external auditors to ensure compliance with SCRRA’s cyber security procedures and industry standards.

DISTINGUISHING CHARACTERISTICS

This job description is not part of a job series.

SUPERVISION EXERCISED AND RECEIVED

• Receive general oversight from executive level management.
• This position will have no direct reports.

The duties listed below are intended to describe the general nature and level of work being performed and are not to be interpreted as an exhaustive list of responsibilities.

Education and Experience

• Bachelor’s degree in Information Systems, Cybersecurity, Auditing or a related field.
• A minimum of (8) years of relevant work experience.
• A minimum of (5) years of experience in supervising and monitoring the work of subordinate staff or project managers, including monitoring and evaluating staff.
• A combination of training, education and or experience that provides the required knowledge, skills and abilities may be considered when determining minimum qualifications. Advanced relevant coursework may also substitute for a portion of required experience. 

PREFERRED QUALIFICATIONS

• A minimum of five (5) years of experience in business security policy development, metrics capture, and analysis and system authorization.
• Certification pertaining to information security and data privacy protection (CISSP, CISA, CRISC, CISM, CEH, etc.)
• Experience in compliance, government or financial industry.
• Experience in the design and implementation of information security programs.
• Knowledge and experience with security and governance frameworks: SSAE-18 (SOC-2), HIPPA, PCI-DSS, ISO27991, NIST, Fedramp.

Knowledge, Skills, and Abilities

Knowledge of:

Skilled in:

Ability to:

PHYSICAL REQUIREMENTS

• Transition between a stationary position at a desk or work location and move about Metrolink facilities or other work site locations.
• Operate tools to perform the duties of the position, such as computers, office equipment and work-related machinery.
• Transport equipment or boxes up to 25lbs.
• Visual acuity to detect, identify and observe employees or train movement and any barriers to movement when working on or near railroad tracks. 
• Hear and perceive the nature of sounds when working on or near railroad tracks.
• Balance, ascend/descend, climb, kneel, stoop, bend, crouch, or crawl within assigned working conditions and or locations.

Working Conditions

Position requires work in a normal office environment with little exposure to excessive noise, dust, or temperature. Work may also be conducted in outdoor environments, at construction sites, Railroad Track and Right-of-Way environments, and warehouse environments, with possible exposure to individuals who are hostile or irate, moving mechanical parts, and loud noises (85+ decibels, such as heavy trucks, construction, etc.). Telecommuting may be available for this classification.

Southern California Regional Rail Authority is an Equal Opportunity Employer. In compliance with the Americans with Disabilities Act, the Authority will provide reasonable accommodations to qualified individuals with disabilities and encourages both prospective and current employees to discuss potential accommodations with the employer. 

SUPPLEMENTAL INFORMATION:

Following a review of resumes and/or applications, the most highly qualified candidates will be invited to continue in the selection process. Eligible applicants will be notified of the exact time and place of assessments and interview. Candidates will be interviewed to determine their relative knowledge, skills and ability in job related areas. Offers of employment may be contingent upon successful completion of a reference check, including degree verification and criminal records check provided through SCRRA.

Internal Candidates: Employees with active discipline as defined in the HR Policy No. 5.3 Positive Discipline Program and/or with performance that does not meet the standard for "meets expectations" as defined in the Performance Planning and Appraisal Process may be precluded from consideration and placement in the position.
 
In compliance with the Americans with Disabilities Act, the SCRRA will provide reasonable accommodations to qualified individuals with disabilities and encourages both prospective and current employees to discuss potential accommodations with the employer.
 
The SCRRA is an Equal Opportunity Employer. EEO/ADA