Information Security Officer

Position: Information Security Officer 1
Nature of Work

Within the Office of Shared Administration (OSA) and the Office of Management Information Services (OMIS), the Information Security Officer will perform all information security initiatives for the WV Departments of Health (DH), Health Facilities (DHF), and Human Services (DoHS). Typical duties include disaster recovery, risk management, incident management, and other internal controls. The incumbent will serve as the lead subject matter expert in assisting with federal, state, and external information security and privacy assessment responses and related documentation (e.g., System Security and Privacy Plans, Plans of Action and Milestones, Privacy Impact Assessments, Security Assessment Worksheets and Reports, and Risk Assessments).

The incumbent will develop, plan, and implement role-based information security training for DH, DHF, DoHS, and OSA employees; develop, implement, and maintain information security policies, standards, and controls; and lead the creation of all agency continuity of operations (COOP), disaster recovery (DR), and business continuity (BCP) plans. This role acts as the Departments' liaison with internal and external state agencies, vendors, contractors, and subject matter experts, as well as federal partners (e.g., CMS, IRS, SSA) to ensure compliance with federal security and privacy requirements.

Other duties as assigned.

Click The APPLY Link To Apply Online.

Minimum Qualifications

Training:
Bachelor's Degree from a regionally accredited four-year college or university.

Substitution:
Up to two years experience as described below may substitute for the required training on a year-for-year basis.

Experience:

Six years of full-time or equivalent part-time paid experience in computer science, information security, software engineering, information technology auditing, network administration, or other related information technology field.

Substitution:

(1) Master's Degree from a regionally accredited college or university may substitute for two (2) years of the required experience.

(2) Each professional information security certification or license from a nationally recognized professional organization, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Auditor (CISA), or Certified Information Security Manager (CISM), or other technical certifications at the discretion of the Office of Technology Chief Information Security Officer may be substituted for one year of work experience.

(3) Each technical or specialist certification, such as Systems Security Certified Practitioner (SSCP), Network + Certification, FBI Computer Analysis Response Team (CART) Field Examiner Certification, Computer Hacking Forensic Investigator (CHFI), or other technical certifications at the discretion of the Office of Information Technology Chief Information Security Officer may be substituted for six months of work experience.

(4) Successful completion of twenty-four (24) semester credits or 384 hours of industry recognized/authorized/certified information security training / seminars, related to ISO job duties may be substituted for one (1) year of the required experience. Semester hours must be supported by transcripts and equivalent industry training must be supported by records from the organization hosting the training/ seminar.

Other Information

PG: 21 $ 54,842 - $97,037

Market Rate: $86,116