DEPUTY CHIEF INFORMATION SECURITY OFFICER

State of New Hampshire

New Hampshire

On-site

USD 97,000 - 135,000

Full time

10 days ago

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

Dental Plan

Flexible Spending Accounts

Retirement Plan

Wellness Program

Paid holidays and leave

Job summary

The State of New Hampshire, Department of Information Technology, Information Security Group, seeks a Deputy Chief Information Security Officer to lead enterprise security strategy and program execution for state government operations. The role includes oversight of networks, systems, and data, with cross-agency responsibilities in the Department of Education.

Strong leadership, policy knowledge, and privacy expertise are essential.

Qualifications

Bachelor's degree required; advanced degree preferred.
10+ years in IT/security-related work with 5+ years in management and 3+ in cybersecurity, risk, GRC, or privacy.
Valid driver’s license and statewide travel may be required.
Must pass a comprehensive background check and fingerprinting.
Experience translating policy and privacy requirements into practical guidance.

Responsibilities

Provide security situational awareness and statewide incident response updates.
Lead the DoIT Security Incident Response Teams and coordinate remediation actions.
Serve as primary security liaison for state agencies and NH Department of Education.
Monitor emerging risks, regulatory changes, and student data privacy requirements.
Establish relationships with school districts and education stakeholders to advance security practices.
Leverage AI to enhance security processes and posture.

Skills

Cybersecurity

Risk management

Governance, Risk, Compliance

Policy & compliance

Identity & access management

Data privacy

Strategic leadership

Education

Bachelor's degree

Advanced degree preferred

Tools

M365/Entra Identity & Access Management

Azure

AWS

Job description

State of New Hampshire Job Posting

Department of Information Technology

Information Security Group- Dept. of Education

25 Hall St Concord, NH 03301

DEPUTY CHIEF INFORMATION SECURITY OFFICER

#9U385

$97,057.00 - $135,272.00 Annually

See total compensation information at the bottom of announcement.

The State of New Hampshire, Department of Information Technology, Information Security Group has a full-time vacancy for Deputy Chief Information Security Officer.

SUMMARY

The Deputy Chief Information Security Officer (DCISO) is a senior-level executive responsible for the enterprise vision, strategy and program to ensure the protection of the State of New Hampshire's information assets including networks, systems and data crucial to state government operations. This position reports to the CISO unless it is covering for the CISO or the CISO becomes unavailable, in which case it reports to the DoIT Commissioner / CIO. This position is responsible for the enterprise vision, strategy and program to ensure the protection of the State of New Hampshire's information assets including networks, systems and data crucial to state government operations.

In addition to these enterprise responsibilities, the DCISO is assigned to the New Hampshire Department of Education to provide direct security leadership and promote statewide student data privacy and school/district/SAU cybersecurity.

MINIMUM QUALIFICATIONS

YOUR EXPERIENCE COUNTS: Each additional year of approved formal education may be substituted for one year of required work experience and/or each additional year of approved work experience may be substituted for one year of required formal education.

Education: Bachelor's degree from a recognized college or university – advanced degree preferred. Each additional year of approved formal education may be substituted for one year of required work experience.

Experience: Ten years of experience in information technology, legal, privacy, or data management; including at least five years in a management role and three years in cybersecurity, risk, Governance, Risk, Compliance (GRC), or privacy. Relevant areas may include policy and compliance, identity and access management, risk management, operations, physical and network security, or secure software development lifecycle practices. Each additional year of approved work experience may be substituted for one year of required formal education.

License/Certification:

Valid driver’s license or access to transportation for use in statewide travel.

Other Requirements

Temporary schedule changes or off-hour work (non-business hours) may be required for incident response, conferences, and other security-related tasks.
Must pass a comprehensive background investigation, including a fingerprint-based criminal background check, a motor vehicle driving record check and may include a local police department background check.
Additional fingerprint-based clearance for Criminal Justice Services (CJIS) may be required.

Trainee Option: Not Applicable.

PREFERRED QUALIFICATIONS

Prior experience working directly with K-12 school districts, schools, or other local education agencies.

Experience partnering with non-technical or resource-constrained organizations on security or compliance initiatives. Ability to communicate complex security and privacy concepts clearly to non-technical audiences, including school and district administrators and school boards.

Experience with M365/Entra Identity and Access Management is strongly preferred, as well as in IaaS/PaaS Azure or AWS cloud environments.

Knowledge of numerous cybersecurity technologies.

Ability to use a risk-management approach to security to balance state business requirements and platform supportability.

Organizational, analytical, team building and collaboration skills.

Demonstrated ability to build consensus and working relationships across organizations with differing levels of technical maturity and resources.

Knowledge of federal and New Hampshire student data privacy laws and standards (e.g., FERPA and RSA 189: 68) preferred.

Skill in translating statewide policy and standards into practical, actionable guidance for local education agencies.

AFTER-HIRE REQUIREMENTS

None.

CAREER ADVANCEMENT OPPORTUNITIES

In-Band Advancement Available: Yes No

Criteria: Not Applicable.

Broad Group Level Advancement Available: Yes No

Criteria: Not Applicable.

DISCLAIMERS

The supplemental job description lists the essential functions of the position and is not intended to include every job duty and responsibility specific to the position. An employee may be required to perform other related duties not listed on the supplemental job description provided that such duties are characteristic of that job title.

When applicable, the work of an employee in trainee status in this position shall be overseen by a fully qualified individual. An employee in trainee status shall meet the minimum qualifications within the period of time specified on the SJD, not to exceed one year of being hired into this position.

RESPONSIBILITIES

Provide security situational awareness notifications; statewide incident response updates; status of agency requests; and recommendations to strengthen statewide security posture to Agency teams.

Provide notification of priority incident response resource requirements; elevate remediation prioritization; provide security assessment of products, solutions, and contracts; provide situational awareness and security updates that impact multi-organizational units.

When designated, lead and oversee the DoIT Security Incident Response Team(s) to complete security tasks and initiatives; direct members engaged in incident response activities; report status of assigned actions and remediation efforts.

Serve as a POC within the Office of the Chief Information Security Officer (CISO) for State Agency Leadership requests for information, actions, and security reviews. Consult with Agency Leads for Agency engagements with external entities that have a cyber or information security component.

Provide information required for various audit efforts as part of the DoIT Team lead by the Compliance Team. As necessary, review vendor security assessments; and coordinate with vendors on findings and recommendations to determine compensatory actions and a "way to yes".

Serve as Primary Liaison with Department of Safety Information Analysis Center. Enable effective cyber threat and information security information sharing across State Agencies and when assigned, along with the CISO, act as the Emergency Support Function (ESF) -17 Lead under the Statewide Emergency Operations Plan for Major Incident Responses.

Serve as the primary security point of contact for the New Hampshire Department of Education (NHED), providing guidance on secure software development, cloud security architecture, and on-premises security architecture applicable to Department systems and initiatives.

Monitor emerging risks, technologies, and regulatory changes affecting student data privacy, and recommend updates to the Student Data Privacy Minimum Standards to the CISO and Department leadership.

Establish and maintain direct working relationships with school districts, schools, and other K-12 education stakeholders — including education technology vendors and state education associations — to advance the adoption of security and student data privacy practices statewide.

Use Artificial Intelligence (AI) to improve security processes and the State’s security posture.

Contact Information

For further information please contact Pam McLeod, Chief Information Security Officer, Pamela.R.McLeod@doit.nh.gov , 603-223-5734.

TOTAL COMPENSATION INFORMATION

The State of NH total compensation package features an outstanding set of employee benefits, including:

HMO or POS Medical and Prescription Drug Benefits:

The actual value of State-paid health benefits and the amount of employee health benefit contributions may vary depending on the type of plan selected and the bargaining unit with which a position is associated.

See this link for details on State-paid health benefits:

https://www.das.nh.gov/hr/benefits.aspx

Value of State's share of Employee's Retirement: 12.87% of pay

Other Benefits