Web Application Development Security Manager (Computer Systems Manager, Level 2 - Provisional)

This is a management class of positions consisting of assignments at different levels of responsibility. Employees in this class of positions are responsible for managing and directing all aspects of an information systems technology area within the University or a College. The following describes specific duties and responsibilities for this position. This position reports to the Director of Information Systems and is responsible for day to day administration of access control and security planning and management for all web based enterprise applications used at the college. The position will oversee activities of web application developers to assure compliance with university security policies and best practices in designing, building, and testing applications. The position will establish a vision and strategy to move the college's diverse set of application authentication methods to a single sign on web portal environment and will act as the college's application security representative on the university's PeopleSoft Enterprise Resource Planning (ERP) Project Team. Supervises and oversees a full range of information systems analysis functions utilizing general knowledge of and involvement with programming languages, operating systems, data base management systems, data communications systems, software and software systems analysis; may instruct, direct and monitor the work of information technology professionals and technical personnel, or coordinate or direct a complex information technology task force. Specific Duties:

• Manage day to day web application security efforts. • Apply project management methodology to planning and completing application security projects. • Provide guidance and mentoring to programming staff. • Complete security audit reporting documents as required. • Collaborate with college's Information Security Officer in assuring a secured systems environment. • Develop, document and communicate application development security standards and procedures • Work with Human Resources to implement procedures and systems to streamline "off-board" and "on-board" processes with respect to applications used by employees. • Evaluate single sign-on web portal technologies and CUNY's portal to develop a road map for the college to coordinate web application access for faculty, staff, and students. • Provide standard approach to defining organizational and individual security profiles and access rights. • Work with end user departments to establish security access levels for future PeopleSoft implementation.

 

QUALIFICATION REQUIREMENTS

 

Preferred Technical Skills:

• Application development team leadership and project management • Hands on web application programming and database design • .Net, Java, Oracle, MS-SQL, Visual Studio, Java Script, VB, C# • Familiarity with ERP and web based technologies • Strong interpersonal communications and writing skills • Excellent organizational skills and attention to details. • Commitment to quality and process improvement. • Broad based web development exposure • Web portal technologies

Minimum Requirements:

1. A high school diploma or GED and six years of progressively, responsible full-time paid information systems technology experience, at least 18 months of which shall have been in an administrative or managerial capacity in the areas of computer applications programming, systems programming, information systems development, data telecommunications, database administration or a closely related field. 2. Education at an accredited college or university may be substituted for the general information systems technology experience described in #1 above (but not for the 18 months of managerial experience) at the rate of one year of college for 6 months of experience, up to a maximum of 4 years of college for 2 years of experience. In addition, a Master’s in Computer Science or a closely related field from an accredited college or university may be substituted for an additional year of general information systems technology experience.

However, all candidates must possess the 18 months of administrative or managerial experience described above.