Deputy Chief Information Security Officer Information Technology Manager MP

The State of Connecticut , Department of Administrative Services ( DAS ), Bureau of Information Technology Solutions (BITS) is recruiting for an anticipated Deputy Chief Information Security Officer (Information Technology Manager
3), to help lead information security for the Connecticut executive branch. BITS runs the state's shared technology services and its enterprise security program, protecting the systems and data of executive branch agencies.

• Visit our State Employee Benefits Overview page!
• Professional growth and development opportuni ties
• A healthy work/life balance to all employees

• Full Time
• First shift; 8:00 AM to 4:30 PM
• Monday through Friday schedule
• Location:
  
  Hartford, CT
• Hybrid

The Deputy Chief Information Security Officer position leads the Compliance, Audit and Architecture division and reports to the state Chief Information Security Officer (CISO). The Deputy CISO leads and owns the security audit compliance program for the data the state holds under federal regulation, including but not limited to: payment card data (PCI DSS), federal tax information (IRS Publication 1075), protected health information (HIPAA), substance use disorder records (42 CFR Part
2), criminal justice information (CJIS), and Social Security Administration data.

• Direct the enterprise security compliance program for regulated data, including but not limited to PCI DSS, IRS Publication 1075, HIPAA, 42 CFR Part 2, CJIS, and Social Security Administration requirements
• Oversee security risk assessments of State, Agencies, & supporting Vendor systems and maintain the record of risk decisions
• Plan security audits and coordinate agency responses to regulatory examinations
• Spearhead the executive branch agency information security program by establishing enterprise-wide security priorities and standards
• Develop, update and maintain security policy, standards, and the security roadmap in support of the CISO's strategy
• Represent the security program to agency leadership and external oversight bodies
• Manage the division's budget, staffing, and work assignments
• Delegated authority - defined authority to act for the Chief Information Security Officer:
• Acts with the full authority of the CISO when the CISO is absent or unavailable
• May direct Security Operations staff and resources during a declared incident, including staff outside this position's normal reporting line
• Serves as the named alternate, alongside legal counsel, in regulatory and incident-notification decisions
• Holds authority to accept information security risk on the state's behalf up to a threshold established by the CISO

Within a state agency information technology division these classes are accountable for the management and direction of information systems, applications development, systems maintenance, and similar information technology functions as well as technical and support staff.

• Plans, organizes and manages all operations and activities of an information technology services unit, division, function or location;
• Responsible for meeting all data processing or information technology needs of the respective unit, division, function or location; establishes priorities for systems development and information technology projects in accordance with agency requirements;
• Coordinates, plans and manages solution architecture projects;
• Directs the planning, design and implementation of complex storage solution configuration;
• Develops plans for future utilization information technology services in the overall agency program;
• Within the financial resources of the agency ensuring the development of high quality, low-cost technology…