Chief Information Security Officer; CISO

Overview

The Chief Information Security Officer (CISO) is responsible for establishing, implementing, and overseeing the agency’s enterprise information security program. This role provides executive leadership for cybersecurity strategy, risk management, regulatory compliance, and incident response, ensuring the confidentiality, integrity, and availability of agency systems and data. The CISO advises executive leadership on cybersecurity risks and investments, coordinates security efforts across business and technical teams, and ensures alignment with the agency’s mission, legal requirements, and operational priorities.

The CISO serves as a member of the executive leadership team for the OCIO and on the board for NITC.

Starting Salary: $130,000/year. Commensurate with experience and upon Governor approval.

Look at what we have to offer!

• 13 paid holidays
• Vacation and sick leave that begin accruing immediately
• Military leave
• 156% (that’s not a typo!) state-matched retirement
• Tuition reimbursement
• Employee assistance program
• 79% employer paid health insurance plans
• Dental and vision insurance plans
• Employer-paid $20,000 life insurance policy
• Public Service Loan Forgiveness Program (PSLF) through the Federal government
• Wide variety and availability of career advancement as the largest and most diverse employer in the State
• Opportunity to be part of meaningful work and make a difference through public service
• Training and Development based on your career aspirations
• Fun, inviting teammates
• A safe and secure environment

At the State, we stand by our core values of treating others with dignity and respect, acting ethically in all situations, and creating an environment where our customer is our top priority. Apply to join our team today!

• Enterprise Cybersecurity Strategy & Governance:
  Develops, implements, and maintains the agency’s enterprise information security strategy, policies, standards, and governance framework aligned with business and mission objectives.
• Risk Management & Compliance:
  Leads cybersecurity risk assessments, vulnerability management, and compliance with applicable federal, state, and regulatory security requirements; oversees audits and corrective action plans.
• Incident Response & Operational Resilience:
  Directs cybersecurity incident response, threat mitigation, and coordination of business continuity and disaster recovery efforts to minimize operational impact and ensure rapid recovery.
• Executive Advisement & Reporting:
  Provides regular briefings and advisement to the Director and executive leadership on cybersecurity posture, risks, trends, and investment needs; supports informed decision-making.
• Security Program Management & Oversight:
  Oversees security operations, tools, and initiatives, including coordination with IT, network, and operations teams to ensure effective implementation of security controls.
• Security Awareness, Training & Vendor Risk:
  Leads agency-wide security awareness and training programs and manages third-party and vendor security risk to ensure protection of agency data and systems.
• Other duties as assigned and within the scope of the classification.

Minimum Qualifications: Bachelor’s degree in information technology, information security, cybersecurity, computer science, or a related field; or equivalent combination of education and experience. Demonstrated experience in information security, cybersecurity, or IT risk management within a complex organizational environment. Experience developing, implementing, or overseeing information security policies, standards, and procedures. Working knowledge of cybersecurity risk management, incident response, and regulatory compliance requirements.

Ability to communicate cybersecurity risks and recommendations clearly to executive leadership and non-technical stakeholders. Experience coordinating security activities across multiple teams or functional areas. Supervisory or leadership experience over technical or professional staff. Experience supporting audits, assessments, or regulatory reviews.

Preferred Qualifications: Demonstrated experience leading an enterprise-level cybersecurity or…