CISO/ISM – Enterprise Information Security Leader

Florida; Tallahassee (FL); On-site; USD 100,000 - 110,000; Full time

Benefits offered by this job

Health insurance

Paid time off

Retirement plans

Tuition waivers

Job summary

The Florida Gaming Control Commission seeks a Chief Information Security Officer/ Information Security Manager in Tallahassee to lead the agency's information security program, risk management, and compliance with state and federal requirements. The role includes developing policies, coordinating security testing, and guiding incident response.

You will oversee security governance, disaster recovery planning, and a team responsible for protecting enterprise systems and data against threats while

Qualifications

• Four (4) years of information security experience with at least three (3) years responding to security incidents.
• An associate's degree from an accredited college or university and two (2) years of experience responding to security incidents.
• One (1) year of experience managing security projects, efforts, or teams.
• Experience with various regulatory requirements, laws, and security frameworks, such as NIST, ISO 27001, PCI DSS, HIPAA, HITECH, SOX, GDPR, CCPA, CIS, or SOC 2.
• Ability to manage a project, internal/external contractors’ team, vendors, budget, and initiatives.

Responsibilities

• Developing, implementing, and monitoring a strategic, comprehensive enterprise information security and IT risk management program.
• Assisting resource owners and IT staff in understanding and responding to security audit failures reported by auditors.
• Ensuring audit trails, system logs, and other monitoring data sources are reviewed periodically to ensure compliance with policies, audit requirements, and regulatory standards.
• Designing, coordinating, and overseeing security testing procedures to verify the security of systems, networks, and applications, and manage the remediation of identified risks.
• Leading incident response activities, including detection, analysis, containment, eradication, recovery, documentation, and notifications; oversee and coordinating the CSIRT.
• Guiding development, testing, and maintenance of disaster recovery and business continuity plans.

Skills

Information security

Regulatory compliance

Incident response

Security governance

Risk management

Education

Bachelor's degree in information technology or related field

Associate's degree with security incident experience

Job description

The Florida Gaming Control Commission seeks a Chief Information Security Officer/ Information Security Manager in Tallahassee to lead the agency's information security program, risk management, and compliance with state and federal requirements. The role includes developing policies, coordinating security testing, and guiding incident response.

You will oversee security governance, disaster recovery planning, and a team responsible for protecting enterprise systems and data against threats while