DEPARTMENT: Administration, Central New York Regional Transportation Authority

SALARY RANGE: Grade 11 - $125,144 to 139,875

Note: If successful, AVP position could transition into the VP position after 12 months. Starting salary is determined by evaluation of experience and qualifications for the position and will be set at some point between the minimum and maximum of the pay scale.

JOB SUMMARY: The Associate Vice President of Information Technology assists the Vice President of Information Technology in leading and managing the Authority’s information technology functions in support of organizational goals. This position provides senior‑level oversight of IT operations, infrastructure, cybersecurity, and technology initiatives, while contributing to strategic planning, budgeting, compliance, and service delivery. The AVP acts as a key advisor to leadership and serves as a delegate for the VP of IT as required.

MAJOR DUTIES:

1. Technology Strategy:
Support the development and execution of the Authority’s IT strategy in collaboration with the Vice President of Information Technology, ensuring alignment with organizational objectives, governance requirements, and long‑term planning.

2. Department Leadership:
Assist in directing daily IT operations by providing leadership, mentorship, technical guidance, and performance oversight to IT staff.

3. Stakeholder Collaboration:
Advise executive leadership and department heads on technology‑related initiatives, translating technical requirements, risks, and opportunities into actionable operational outcomes.

4. IT Budgeting:
Assist in the formulation, monitoring, and management of the annual IT budget, supporting cost control, forecasting, and effective allocation of technology resources.

5. Vendor Management:
Support the negotiation, administration, and performance monitoring of vendor contracts and third‑party IT service agreements.

6. Inventory Operations:
Oversee IT asset lifecycle activities, including procurement coordination, inventory tracking, maintenance planning, and secure disposal of technology assets.

7. Network Design:
Oversee the design, implementation, and maintenance of secure and scalable network environments (LAN, WAN, SD‑WAN), including segmentation and secure remote access technologies such as IPsec and SSL/TLS VPNs.

8. Cybersecurity Frameworks:
Assist in developing, implementing, and enforcing cybersecurity policies aligned with industry standards (e.g., NIST CSF, CIS Controls, PCI/DSS, ISO/IEC 27001).

9. Threat Monitoring:
Oversee monitoring of security systems, including NGFW, IDS/IPS, and SIEM platforms, and coordinate response actions to mitigate cyber threats and vulnerabilities.

10. Access Control:
Ensure effective identity and access management practices, including least‑privilege access, MFA enforcement, secure authentication technologies (e.g., IEEE 802.1X), and integration of logical and physical access controls.

11. Data Protection:
Ensure the protection of data at rest and in transit through approved encryption standards (AES‑256, TLS 1.2/1.3) and secure wireless protocols (WPA3 Enterprise).

12. System Performance:
Oversee monitoring of network and system performance using secure protocols and tools (e.g., SNMPv3, NetFlow) to maintain uptime and mitigate service disruptions, including DDoS‑related risks.

13. Disaster Recovery:
Assist in developing, documenting, maintaining, and testing disaster recovery and business continuity plans to minimize operational disruption.

14. Internal Controls:
Ensure IT operations adhere to established internal controls and comply with local, state, federal, and industry data privacy and regulatory requirements.

15. Audit Support:
Support internal and external IT audits by coordinating documentation, remediation activities, and timely resolution of identified findings.

16. Technology Research:
Participate in researching and evaluating emerging technologies and industry trends to identify opportunities for operational improvement.

17. System Deployment:
Lead or support the testing, integration, and enterprise‑wide deployment of new technology systems and infrastructure.

18. Reporting Operations:
Assist in providing comprehensive reporting across technology and operational functions to support enterprise visibility, governance, and executive decision‑making.

JOB REQUIREMENTS:

Education/Experience: Bachelor’s Degree required, as well as an equivalent combination of related work, training and/or education sufficient to successfully perform the essential duties of the job.

1. Advanced knowledge of enterprise IT operations, infrastructure, and governance

2. Strong understanding of networking, cybersecurity frameworks, and risk management

3. Experience supporting IT budgeting, vendor management, and contract administration

4. Knowledge of IT asset lifecycle management practices

5. Experience implementing IAM, MFA, encryption, and access control technologies

6. Ability to support disaster recovery and business continuity planning

7. Familiarity with regulatory compliance and audit processes, particularly in public‑sector environments

8. Strong leadership, communication, and problem‑solving skills

All applications and In-House Transfer Requests must be submitted to Danielle Ranieri. Alternatively, you can apply on our website at www.centro.org. All qualified applicants are encouraged to apply. CNYTRA reserves the right to select a candidate from within or outside the Company.

CNYRTA is an equal opportunity employer and a drug free workplace (marijuana included).

Pay: $125,144.00 - $139,875.00 per year

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Employee assistance program
• Flexible spending account
• Health insurance
• Life insurance
• Paid time off
• Referral program
• Vision insurance

Experience:

• Cybersecurity: 5 years (Preferred)
• Management: 5 years (Preferred)

Ability to Commute:

• Syracuse, NY 13202 (Required)

Work Location: In person