Senior Information Security Officer - Remote, High-Impact

Commonwealth Of Virginia; Chesterfield; Hybrid; GBP 90,000 - 135,000; Full time

Benefits offered by this job

Telework eligible

Job summary

Virginia Information Technologies Agency (VITA) seeks an Information Security Officer to lead and mature its enterprise security program, covering policy, risk management, architecture, incident response, and workforce training.

The ISO reports to the Commonwealth CISO and serves as the agency's security liaison for executive leadership, audits, and oversight, with after-hours availability during incidents.

Qualifications

• Extensive knowledge of IT security architecture and security control implementation.
• Extensive experience in security program management and incident response.
• Extensive experience building, leading, and managing an information security program.
• Extensive experience with enterprise IT systems and security tools.
• Extensive experience interpreting and applying federal and state laws, regulations, and security standards (NIST SP 800-53, SEC-530).
• Experience developing and implementing information security policies and standards.
• Knowledge of strategic planning for information security programs.

Responsibilities

• Develop, implement, and mature security and data protection solutions for confidentiality, integrity, and availability of information assets.
• Assess requirements and guide additional security services across the agency.
• Develop services, standards, and procedures to address information security risk and compliance.
• Lead agency information security planning to establish and maintain a comprehensive program.

Skills

IT security architecture

Security program management

Incident response

Security standards

Policy development

Disaster recovery planning

Security controls

Job description

Virginia Information Technologies Agency (VITA) seeks an Information Security Officer to lead and mature its enterprise security program, covering policy, risk management, architecture, incident response, and workforce training.

The ISO reports to the Commonwealth CISO and serves as the agency's security liaison for executive leadership, audits, and oversight, with after-hours availability during incidents.