Information Security Officer

Crownsville, United States | Posted on 05/19/2026

The Department of Information Technology (DoIT) Office of Security Management (OSM) is seeking an Information Security Officer (ISO) to support OSM in coordinating the adoption and implementation of centrally provided cyber security services. The ISO will play an active role in integrating DoIT managed services and providing tailored cybersecurity consultation to meet the unique mission needs of various agencies. Embedded within these agencies, the ISO will serve as the primary point of contact, ensuring that cybersecurity solutions are effectively aligned with agency objectives using the Cybersecurity Framework (CSF).

The ISO will regularly assess and address cybersecurity needs, develop and implement risk management strategies, support incident response, and maintain security awareness programs. The ISO is expected to reach back to DoIT through the ISO Program Director to answer questions and gather consensus on direction. Close collaboration with the ISO Program Coordinator and the ISO Program Director will be essential to ensure consistent alignment with DoIT’s cybersecurity goals, policies, and procedures.

These positions require a minimum of 5 years of experience in cybersecurity, with relevant certifications such as CISSP or CISM, strong communication skills, and the ability to manage complex security risks. Prior experience and familiarity with federal, state, and local government agencies is highly desirable. The ISO will be expected to travel as needed to fulfill their duties.

The primary duties involve overseeing the daily operations of ISO-related projects and processes, planning and scheduling service delivery and adoption, identifying opportunities for the development of new services within their assigned organizations. Detailed responsibilities include, but are not limited to:

• Develop and maintain metrics to track adoption rates and regularly assess and enhance security controls.
• Conduct assessments and evaluations to ensure effectiveness and compliance with established standards.
• Review and implement security policies to ensure compliance with regulatory requirements and organizational standards.
• Conduct thorough reviews of vulnerability data, coordinating with stakeholders to prioritize and address identified vulnerabilities effectively.
• Actively participate in Authorization to Operate (ATO) assessments, contributing expertise to ensure systems meet security requirements for operation.
• Collaborate with cross-functional teams to develop and enhance security protocols and procedures for seamless integration and utilization.
• Regularly report on adoption rates and identify areas for improvement.
• Monitor security systems to detect and respond to potential threats.
• Act as the primary point of contact for ISO agency-related inquiries and engagements.
• Monitor progress against established plans and adjust as necessary.
• Develop strategic plans and roadmaps for service delivery.
• Implement measures to address identified vulnerabilities.
• Participate in the design and implementation of secure system architectures.
• Develop and deliver security awareness training programs for employees.
• Develop and maintain an incident response plan.
• Lead and manage security-related projects, ensuring timely and successful completion.
• Prepare and present security reports to management and stakeholders.
• Maintain accurate and up-to-date security documentation.
• Ensure efficient allocation of resources.

• Bachelor’s degree in computer science, information technology, information security, cybersecurity or related field.
• Advanced degrees or certifications such as CISSP, CISM, CISA, Sec+, CISSO.

• Minimum of 5 years’ experience in information security management, IT administration, or related fields.
• 3 years experience in implementing cyber assessment and remediation plans, procedures, and cyber defense operations.
• Practical experience with security technologies, incident response, risk management, and compliance.
• Analytical and problem-solving skills, with the ability to analyze complex security issues and develop effective…