Chief Information Security Officer

Overview

The Vision
Multnomah County is seeking a visionary Chief Information Security Officer (CISO) who understands that security is a human endeavor powered and protected by cutting-edge technology.

In this role, you will serve as the strategic link between technical security frameworks and human-centric engagement. You will champion a culture where robust security is built on a foundation of empathy and proactive education. As a key advocate for our community, you will confidently represent security interests to both technical teams and executive leadership. You will oversee the availability, integrity, and confidentiality of information systems, ensuring that security protocols serve as a catalyst for innovation across the County.

• Human-Centered Leadership:
  Build a culture where security is a shared responsibility. You will cultivate deep relationships across departments and use emotional empathy to foster trust and layered security.
• Proactive Threat Hunting:
  Move beyond passive defense. You will oversee sophisticated threat-hunting operations to neutralize adversaries before they reach the perimeter.
• The Voice of Security:
  Act as a high-profile advocate. Whether it’s a community meeting or a sensitive board briefing, you possess the public speaking prowess to make complex risks relatable to non-technical stakeholders.
• AI & Automation Orchestration:
  Lead the charge in integrating AI-driven security tools. You’ll leverage automation to eliminate alert fatigue and use machine learning to predict emerging patterns.
• Sensitive Response & Operations:
  Direct high-stakes incident response with calm, clinical precision. You will manage the technical, legal, and reputational fallout of breaches while maintaining the trust of County employees and the community.
• Dynamic Training Programs:
  You will spearhead immersive, behavioral-based training programs that empower employees to be our strongest line of defense.

• Communication:
  Act as a trusted liaison between the technical security and engineering teams, Senior Executives, and Elected Officials/Board of Commissioners. This requires an exceptional ability to translate complex technical language into clear, understandable business value.
• Compliance Expertise:
  Deep mastery of HIPAA, CJIS, PII, and PCI frameworks.
• Cyber Insurance Management:
  Responsible for negotiating and maintaining cyber insurance policies.
• Supply Chain Integrity:
  Develop and oversee robust Third-Party Risk Management (TPRM) initiatives to ensure all technology vendors meet the County's rigorous security and privacy standards by design
• Tech Stack:
  Expertise in cloud architecture, AI-assisted Endpoint Detection and Response (EDR)/ Extended Detection and Response (XDR), and Security Orchestration, Automation, and Response (SOAR) platforms to stop attacks.
• Crisis Management:
  Maintains composure under pressure with deep experience leading digital forensics.
• Strategic Mindset:
  Ability to align security with County goals and technology strategic plans

• Autonomy:
  You have the mandate to lead our security architecture, IAM initiatives, and develop strategic cyber defense-in-depth frameworks.
• Innovation:
  Applying existing tools, AI and automation to protect County infrastructure, data and Community data.
• Influence: A seat at the table in the Office of the CIO where your voice directly impacts the County’s strategic direction.
• Purpose:
  
  Cybersecurity is not just a product, but is a combination of relationships and processes that strengthen our community and employees, and enables the safe use of innovative technology.

Virtual Q&A Sessions for Candidates:
We are hosting an informational session for potential candidates to learn more about Multnomah County, our department, this position, and the application process.

We welcome you to join us via the Google Meet link below to hear more details and ask any questions you may have. You can access the meeting directly through the link, but if you would prefer to receive a specific calendar invitation, please email allison.conkling.

Date:
Wednesday, February 11, 2026

Time: 12:00pm - 1:00pm…