DEPUTY CHIEF INFORMATION SECURITY OFFICER

State of New Hampshire; Concord (NH); Vor Ort; USD 97.000 - 135.000; Vollzeit

Benefits dieser Stelle

Health benefits

Dental plan

Flexible spending accounts

Retirement plan

Zusammenfassung

The State of New Hampshire, Department of Information Technology, Information Security Group seeks a Deputy Chief Information Security Officer for a full-time role in Concord, NH. The position oversees statewide security, incident response, and collaboration with school districts and state agencies.

Ideal candidates will have 10+ years in IT with senior security leadership and robust experience in GRC, privacy, and cross-agency coordination; familiarity with cloud security and federal/privacy

Qualifikationen

• Bachelor's degree required, advanced degree preferred.
• Ten years in IT, with at least five in management and three in cybersecurity/GRC/privacy.

Aufgaben

• Provide security situational awareness and statewide incident response updates.
• Lead the DoIT Security Incident Response Team and coordinate remediation efforts.
• Serve as primary security liaison to state agencies and NHED; work with external entities on security reviews.

Kenntnisse

Cybersecurity leadership

GRC experience

Incident response

Ausbildung

Bachelor's degree

Jobbeschreibung

Job Summary

The State of New Hampshire, Department of Information Technology, Information Security Group has a full-time vacancy for Deputy Chief Information Security Officer.

Location

25 Hall St Concord, NH 03301 (US:NH:CONCORD)

Employment Type

Full-Time

Salary

$97,057.00 - $135,272.00 Annually

Minimum Qualifications

• Education: Bachelor's degree from a recognized college or university – advanced degree preferred.
• Ten years of experience in information technology, legal, privacy, or data management; including at least five years in a management role and three years in cybersecurity, risk, Governance, Risk, Compliance (GRC), or privacy.
• Valid driver's license or access to transportation for use in statewide travel.

Other Requirements

• Temporary schedule changes or off‑hour work (non‑business hours) may be required for incident response, conferences, and other security‑related tasks.
• Must pass a comprehensive background investigation, including a fingerprint‑based criminal background check, a motor‑vehicle driving record check and may include a local police department background check.
• Additional fingerprint‑based clearance for Criminal Justice Services (CJIS) may be required.

Preferred Qualifications

• Prior experience working directly with K‑12 school districts, schools, or other local education agencies.
• Experience partnering with non‑technical or resource‑constrained organizations on security or compliance initiatives.
• Ability to communicate complex security and privacy concepts clearly to non‑technical audiences, including school and district administrators and school boards.
• Experience with M365/Entra Identity and Access Management is strongly preferred, as well as in IaaS/PaaS Azure or AWS cloud environments.
• Knowledge of numerous cybersecurity technologies.
• Ability to use a risk‑management approach to security to balance state business requirements and platform supportability.
• Organizational, analytical, team building and collaboration skills.
• Demonstrated ability to build consensus and working relationships across organizations with differing levels of technical maturity and resources.
• Knowledge of federal and New Hampshire student data privacy laws and standards (e.g., FERPA and RSA 189: 68) preferred.
• Skill in translating statewide policy and standards into practical, actionable guidance for local education agencies.

Responsibilities

• Provide security situational awareness notifications, statewide incident response updates, status of agency requests, and recommendations to strengthen statewide security posture to Agency teams.
• Provide notification of priority incident response resource requirements; elevate remediation prioritization; provide security assessment of products, solutions, and contracts; provide situational awareness and security updates that impact multi‑organizational units.
• Lead and oversee the DoIT Security Incident Response Team(s) to complete security tasks and initiatives; direct members engaged in incident response activities; report status of assigned actions and remediation efforts.
• Serve as a POC within the Office of the Chief Information Security Officer (CISO) for State Agency Leadership requests for information, actions, and security reviews.
• Consult with Agency Leads for Agency engagements with external entities that have a cyber or information security component.
• Provide information required for various audit efforts as part of the DoIT Team led by the Compliance Team; review vendor security assessments and coordinate with vendors on findings and recommendations to determine compensatory actions.
• Serve as Primary Liaison with Department of Safety Information Analysis Center; enable effective cyber threat and information security information sharing across State Agencies and, when assigned, act as the Emergency Support Function (ESF)-17 Lead under the Statewide Emergency Operations Plan for Major Incident Responses.
• Serve as the primary security point of contact for the New Hampshire Department of Education (NHED), providing guidance on secure software development, cloud security architecture, and on‑premises security architecture applicable to Department systems and initiatives.
• Monitor emerging risks, technologies, and regulatory changes affecting student data privacy, and recommend updates to the Student Data Privacy Minimum Standards to the CISO and Department leadership.
• Establish and maintain direct working relationships with school districts, schools, and other K‑12 education stakeholders — including education technology vendors and state education associations — to advance the adoption of security and student data privacy practices statewide.
• Use Artificial Intelligence (AI) to improve security processes and the State’s security posture.

Benefits

• HMO or POS Medical and Prescription Drug Benefits.
• The actual value of State‑paid health benefits and the amount of employee health benefit contributions may vary depending on the type of plan selected and the bargaining unit with which a position is associated.
• Dental Plan at minimal cost for employees and their families ($500–$1800 value).
• Flexible Spending healthcare and childcare reimbursement accounts.
• State defined benefit retirement plan and Deferred Compensation 457(b) plan.
• Work/life balance flexible schedules, paid holidays and generous leave plan.
• $50,000 state‑paid life insurance plus additional low‑cost group life insurance.
• Incentive‑based Wellness Program (ability to earn up to $500).

Total Compensation Information

• Value of State's share of Employee's Retirement: 12.87% of pay.
• See this link for details on State‑paid health benefits: https://www.das.nh.gov/hr/benefits.aspx
• Total Compensation Statement Worksheet: https://www.das.nh.gov/jobsearch/compensation-calculator.aspx
• Explore the Benefits of State Employment on our website: https://www.das.nh.gov/hr/documents/BenefitBrochure.pdf
• https://www.das.nh.gov/hr/index.aspx

Equal Opportunity Employment

EOE

Telecommunications Assistance

TDD Access: Relay NH1-800-735-2964

Contact

For further information please contact Pam McLeod, Chief Information Security Officer, 603-223-5734; [e-mail]