Chief Information Security Officer (Contract)

State of Illinois; Illinois; On-site; USD 150,000 - 210,000; Full time

Job summary

Department of Corrections in Illinois seeks a Chief Information Security Officer to lead the agency's security program from Springfield with a hybrid schedule requiring periodic headquarters attendance. This contract role will set security policy, oversee risk assessments, and ensure compliance with HIPAA and criminal justice standards.

The CISO will direct incident response, deliver security training, and coordinate with the Department of Innovation and Technology to maintain a robust security

Qualifications

• Experience establishing and maintaining information security policies, standards, and procedures.
• Knowledge of NIST standards, HIPAA Security Rule, and FBI CJIS Security Policy.
• Expertise in information security risk management, security control assessments, and incident response.
• Experience with identity and access management and privileged access controls.
• Ability to serve as primary point of contact for external audits and compliance reviews.

Responsibilities

• Establish and enforce information security policies and standards for the department.
• Coordinate security program with the Department of Innovation and Technology.
• Direct incident response activities and manage security training across the department.
• Lead risk assessments and ensure compliance with federal and state requirements (HIPAA and CJIS).
• Serve as primary liaison for external audits and compliance reviews.

Skills

Information security policies

NIST standards

HIPAA Security Rule

FBI CJIS Security Policy

Risk management

Security control assessments

Incident response

Identity and access management

Audits and compliance reviews

Job description

The Chief Information Security Officer serves as the Department of Corrections' information security leader, overseeing the agency's security program in coordination with the Department of Innovation and Technology. The role establishes and enforces security policies, manages risk assessments and compliance with federal and state requirements including HIPAA and criminal justice standards, directs incident response activities, and delivers security training across the department. This is a contract position based in Springfield, IL with a hybrid work schedule requiring periodic headquarters attendance.

Key qualifications:

• Experience establishing and maintaining information security policies, standards, and procedures
• Knowledge of NIST standards, HIPAA Security Rule, and FBI Criminal Justice Information Services Security Policy
• Expertise in information security risk management, security control assessments, and incident response
• Experience with identity and access management and privileged access controls
• Ability to serve as primary point of contact for external audits and compliance reviews