Residence Requirements:

THERE ARE NO RESIDENCY REQUIREMENTS FOR PARTICIPATION IN THIS EXAMINATION. There are two anticipated vacancies at the Erie County Medical Center Corporation. 

Examples of Duties:

An Information Security Analyst provides for the security of the computer systems and network for the Health Information Systems Department at the Erie County Medical Center Corporation; 

Monitors enterprise compliance with information technology security policies and procedures for hospital systems and infrastructure;

Deploys information technology security controls and processes for hospital systems and infrastructure;

Monitors information technology systems, network and processes for security events;

Performs risk assessments to identify vulnerabilities or security exposures;

Responds to systems and network security-related malicious events and potential computer attacks;

Coordinates vulnerability management including virus protection and version/patch management;

Establishes intrusion detection and data loss prevention programs;

Collaborates in planning for infrastructure design and review of software acquisitions/ upgrades; reviews to ensure appropriate level of systems and network security;

Reviews applications and services supplied by cloud service providers for appropriate level of security controls;

Instructs the work force on best procedures for information technology security;

Monitors information technology logs and reports;

Documents and monitors security controls, reports and processes.

Qualifications:

MINIMUM QUALIFICATIONS:  Candidates must meet one of the following requirements on or before the date of the written test:

A.) Graduation from an regionally accredited or New York State registered college or university with a Bachelor’s Degree in Information Technology, Computer Science, Cybersecurity or closely related field and two (2) years of experience in systems software, systems analysis or application programming, and included experience in information security* ; or:

B.) Graduation from an regionally accredited or New York State registered college or university with an Associate’s Degree in Information Technology, Computer Science, Cybersecurity or closely related field and four (4) years of experience in systems software, systems analysis or application programming, of which two (2) years was experience in information security*; or:

C.) An equivalent combination of training and experience as defined by the limits of (A) and (B).

Notes:

1. *Information security, for the purpose of qualifying applications, is defined as the processes designed and implemented to protect information, systems and networks against unauthorized access, use or disruption utilizing various forms of technology.

2. Verifiable part-time and/or volunteer experience will be pro-rated toward meeting full-time experience requirements.

3. Your degree and/or college credit must have been awarded by a regionally accredited college or university or one recognized by the New York State Education Department as following acceptable educational practices. A grade of "D" or better is necessary for a course to be credited as successfully completed. If your degree and/or college credit was awarded by an educational institution outside of the United States and its territories, you must provide independent verification of equivalency. You can write to this Department for a list of acceptable companies providing this service; you must pay the required evaluation fee.

Notice to Candidates: Transcripts will now be accepted by the Department of Personnel ONLY at time of application.
All subsequent transcripts must be submitted at time of interview.

The New York State Department of Civil Service has not prepared a test guide for this examination. However,candidates may find information in the publication "How to take a written test" helpful in preparing for this test. This publication is available on line at: https://www.cs.ny.gov/testing/testguides.cfm

Subjects of Examination:

Subjects of Examination: A written test designed to evaluate knowledge, skills and /or abilities in the following areas:

1. Principles of networked communications

These questions test for basic concepts and terminology of data communications. They cover such subjects as data communications, types of networks, modems, security, protocols, topologies, transmission media, wiring, installation and troubleshooting. The questions are general in scope and are not specific to any vendor or system.

2. Preparing written material

These questions test for the ability to present information clearly and accurately, and to organize paragraphs logically and comprehensibly. For some questions, you will be given information in two or three sentences followed by four restatements of the information. You must then choose the best version. For other questions, you will be given paragraphs with their sentences out of order. You must then choose, from four suggestions, the best order for the sentences.

3. Project management

These questions are designed to test for techniques and concepts of project management. They may cover, but not necessarily be confined to, management of systems development, management by objectives, project scheduling and control techniques (e.g., PERT), characteristics of organizations and of the systems life cycle, and the development of data processing standards.

4. Supervision

These questions test for knowledge of the principles and practices employed in planning, organizing, and controlling the activities of a work unit toward predetermined objectives. The concepts covered, usually in a situational question format, include such topics as assigning and reviewing work; evaluating performance; maintaining work standards; motivating and developing subordinates; implementing procedural change; increasing efficiency; and dealing with problems of absenteeism, morale, and discipline.

5. Systems analysis and design

These questions test for techniques and concepts of computer systems analysis and design. They cover such subjects as feasibility and applications studies, systems development tools and software, the systems life cycle, types of systems (e.g., client/server, Web-based), controls, and systems documentation, testing, and implementation.

NOTICE TO CANDIDATES: Unless otherwise noted, candidates are permitted to use quiet, hand held, solar or battery powered calculators. Devices with typewriter keyboards, "Spell Checkers", “Personal Digital Assistants", "Address Books", "Language Translators", "Dictionaries", or any similar devices are prohibited. You may not bring books or other reference materials.

**IMPORTANT APPLICATION FEE - READ CAREFULLY**

A $20.00 filing fee is required for this exam. The required fee must accompany your application. Send or bring check or money order made payable to Erie County Personnel Department and write the examination number(s) on your check or money order. Do not send or bring cash, as the County cannot be responsible for cash payment. As no refund will be made, you are urged to compare your qualifications carefully with the requirements for admission and file only for those examinations for which you are clearly qualified.