Manager, Threat & Vulnerability

Position Description

About Harris County and Universal Services:

Harris County Universal Services (Universal Services) is transforming the way the County does business and seeking a Manager, Threat & Vulnerability to join our team.

Universal Services is the enterprise IT solutions center for the departments and offices of Harris County, providing Information Technology, Public Safety and Justice Technologies, 311 Constituent Engagement Services, Fleet Services, and Records and Information Governance Services.

Harris County is the third largest and most diverse county in the nation, with a population of more than 4.7 million. Harris County Commissioners Court, the County’s governing body, directs a budget of more than $4 billion providing essential services including flood control, infrastructure, healthcare, housing, and justice administration.

This is a great time to join Universal Services as we enhance critical services to Harris County residents and internal customers.

Position Overview:

The Information Security Manager is responsible for protecting Harris County’s information systems and critical assets through the day-to-day management of projects, services, and personnel within the Cybersecurity Threat & Vulnerability team. This role requires strategic oversight, operational execution, and leadership to uphold cybersecurity objectives across the organization.

Job Responsibilities:

• Manage daily administrative functions and performance evaluations for direct reports within the Threat & Vulnerability Management scope of work.
• Ensure the timely and high-quality delivery of Cybersecurity services, including:
• Vulnerability Scanning & Remediation
• Threat & Vulnerability Advisory
• Daily Threat Monitoring & Response
• Incident Response
• Firewall Change Requests Review and relevant approvals
• Lead or support projects such as multi-factor authentication, advanced threat protection, cloud security, web filtering, web application testing, SOC development, artificial intelligence, centralized logging/SIEM, etc.
• Communicate security vulnerabilities and risk impacts effectively to stakeholders and support mitigation efforts.
• Analyze vulnerability data for root cause analysis and trend identification.
• Design and implement long-term solutions to systemic security issues.
• Act as a subject matter expert on complex technical and business projects.
• Support Cybersecurity Incident Response Team (CIRT) investigations and resolution efforts.
• Review and refine cybersecurity policies in partnership with the C(ISO), standards, and procedures for strategic alignment.
• Evaluate and select cybersecurity products and vendors through proof-of-concepts and formal assessments.
• Oversee the development of documentation and training materials, including:
• Project plans
• Executive presentations
• Technical reference documents
• Training/job aids
• Architecture diagrams
• Ensure consistent use of cybersecurity procedures and tools for vulnerability management and reporting.
• Stay informed about global threat landscapes, emerging technologies, and trends, and apply them to county operations.
• Balance business needs with security requirements and communicate tradeoffs clearly.
• Mentor junior managerial and technical staff.
• Perform other duties as assigned.
  
  

Harris County is an Equal Opportunity Employer

https://hrrm.harriscountytx.gov/Pages/EqualEmploymentOpportunityPlan.aspx

If you need special services or accommodations, please call (713) 274-5445 or email ADACoordinator@bmd.hctx.net

Requirements

Education:

• High school diploma or G.E.D. from an accredited institution.
  
  
  

Experience:

• Minimum five (5) years of progressive work experience in Information Security, IT, Computer Science, or a related field.
  
  
  

Knowledge, Skills, & Abilities:

• Proven leadership experience managing a team of 3 or more.
• Expertise in designing and implementing security technologies from concept to deployment.
• Strong interpersonal and communication skills for collaborating across departments.
• Experience with vulnerability assessments and firewall rule request reviews.
  
  
  

Applicants for this position will be subject to a criminal background check that includes being fingerprinted. This applies to any position with network access to Criminal Justice Information Services (CJIS) or access to an area where CJIS is received, maintained or stored either manually or electronically (i.e. custodian, maintenance).

Automatic Disqualification:

• Convictions, probation, or deferred adjudication for any Felony, and any Class A Misdemeanor
• Convictions, probation, or deferred adjudication for a Class B Misdemeanor, if within the previous 10 years
• Open arrest for any criminal offense (Felony or Misdemeanor)
• Family Violence conviction
  
  
  

NOTE: Qualifying education, experience, knowledge and skills must be documented on your job application. You may attach a resume to the application as supporting documentation but ONLY information stated on the application will be used for consideration. "See Resume" will not be accepted for qualifications.

Preferences

Education:

• Bachelor’s degree from an accredited institution.
• One or more of the following certifications:
• Certified Information Systems Security Professional (CISSP)
• Global Information Assurance Certification (GIAC)
• CompTIA Security+
  
  
  

Experience:

• Hands-on experience with:
• Vulnerability scanning and penetration testing tools
• Security event monitoring and response platforms
• Threat intelligence gathering and analysis
  
  
  

Knowledge, Skills, and Abilities:

• Experience in CIRT or other incident response efforts.
• Strong organizational skills and ability to manage multiple priorities.
• Ability to resolve challenges through consensus and influence.
• Excellent technical writing, analytical, and problem-solving skills.
• Enthusiasm for cybersecurity and ability to thrive in a collaborative environment.
• Broad understanding of cybersecurity frameworks (e.g., NIST, CIS Controls) and compliance regulations (e.g., PCI, HIPAA, CJIS).
  
  
  

General Information

Location:

• 406 Caroline Street, Houston, TX 77002
  
  
  

Work Arrangements:

• Onsite (5 days/week)
  
  
  

Work Schedule:

• 8 hours per day
  
  
  

Employment is contingent upon passing a background check and drug screen.

Due to a high volume of applications positions may close prior to the advertised closing date or at the discretion of the Hiring Department.