Deputy Chief Information Security Officer (Information Technology Manager 3)

State of Connecticut; Hartford (CT); Hybrid; USD 110,000 - 140,000; Full time

Benefits offered by this job

Professional growth

Healthy work-life balance

Job summary

The State of Connecticut, Department of Administrative Services (DAS), Bureau of Information Technology Solutions (BITS) seeks a Deputy Chief Information Security Officer (Information Technology Manager 3) to lead the executive branch security program from Hartford in a hybrid capacity.

The role directs the compliance, audit and architecture division, overseeing PCI DSS, IRS 1075, HIPAA and CJIS requirements, and drives policy, risk assessments, audits, and enterprise security priorities across

Qualifications

• Ten (10) years of experience in information technology and security.
• One (1) year of managerial experience.
• Experience in regulatory audits and compliance programs.
• Knowledge of PCI DSS, HIPAA, IRS 1075, CJIS and related data protection requirements.
• Bachelor’s degree may substitute up to 4 years of experience; Master’s degree may substitute for 1 additional year.

Responsibilities

• Direct the enterprise security compliance program for regulated data.
• Oversee security risk assessments of State, Agencies, and Vendors.
• Plan security audits and coordinate regulatory examinations.
• Spearhead the enterprise information security program by establishing priorities and standards.
• Develop, update and maintain security policy, standards, and roadmap.
• Represent the security program to leadership and external oversight bodies.
• Manage the division's budget, staffing, and work assignments.

Skills

Plan and Deploy for Business Results

Lead Change

Focus on Results and Quality

Understand Customers and Markets

Lead People

Build Coalitions

Business Knowledge

Education

Bachelor's degree in Computer Science or MIS

Master’s degree may substitute for experience

Job description

Introduction

The State of Connecticut, Department of Administrative Services (DAS), Bureau of Information Technology Solutions (BITS) is recruiting for an anticipated Deputy Chief Information Security Officer (Information Technology Manager 3), to help lead information security for the Connecticut executive branch. BITS runs the state's shared technology services and its enterprise security program, protecting the systems and data of executive branch agencies.

WHAT WE CAN OFFER YOU:

• Professional growth and development opportunities
• A healthy work/life balance to all employees

POSITION HIGHLIGHTS:

• Full Time
• First shift; 8:00 AM to 4:30 PM
• Monday through Friday schedule
• Location: Hartford, CT
• Hybrid

THE ROLE:

The Deputy Chief Information Security Officer position leads the Compliance, Audit and Architecture division and reports to the state Chief Information Security Officer (CISO). The Deputy CISO leads and owns the security audit compliance program for the data the state holds under federal regulation, including but not limited to: payment card data (PCI DSS), federal tax information (IRS Publication 1075), protected health information (HIPAA), substance use disorder records (42 CFR Part 2), criminal justice information (CJIS), and Social Security Administration data.

Responsibilities:

• Direct the enterprise security compliance program for regulated data, including but not limited to PCI DSS, IRS Publication 1075, HIPAA, 42 CFR Part 2, CJIS, and Social Security Administration requirements
• Oversee security risk assessments of State, Agencies, & supporting Vendor systems and maintain the record of risk decisions
• Plan security audits and coordinate agency responses to regulatory examinations
• Spearhead the executive branch agency information security program by establishing enterprise-wide security priorities and standards
• Develop, update and maintain security policy, standards, and the security roadmap in support of the CISO's strategy
• Represent the security program to agency leadership and external oversight bodies
• Manage the division's budget, staffing, and work assignments

Delegated Authority - Defined Authority to Act for the Chief Information Security Officer:

• Acts with the full authority of the CISO when the CISO is absent or unavailable
• May direct Security Operations staff and resources during a declared incident, including staff outside this position's normal reporting line
• Serves as the named alternate, alongside legal counsel, in regulatory and incident-notification decisions
• Holds authority to accept information security risk on the state's behalf up to a threshold established by the CISO

PURPOSE OF JOB CLASS (NATURE OF WORK)

Within a state agency information technology division these classes are accountable for the management and direction of information systems, applications development, systems maintenance, and similar information technology functions as well as technical and support staff.

EXAMPLES OF DUTIES

• Plans, organizes and manages all operations and activities of an information technology services unit, division, function or location;
• Responsible for meeting all data processing or information technology needs of the respective unit, division, function or location; establishes priorities for systems development and information technology projects in accordance with agency requirements;
• Coordinates, plans and manages solution architecture projects;
• Directs the planning, design and implementation of complex storage solution configuration;
• Develops plans for future utilization information technology services in the overall agency program;
• Within the financial resources of the agency ensuring the development of high quality, low-cost technology solutions aligned with the needs of the State and its agencies;
• Aligns information technology planning with the business strategy;
• Leads and influences the development of standards and decisions regarding changes to systems/applications;
• Manages information systems activities within areas such as IT infrastructure and architecture, applications development, networks, computer operations and support;
• Oversees information technology projects from conception to completion;
• Works with leadership team to maximize cross-team contributions;
• Leads information technology operations to ensure exceptional quality and timely response to all customer service issues;
• Interfaces regularly with clients/customers;
• Stays abreast of local, regional and national industry trends;
• Understands the major economic, political, technological and competitive trends affecting technology;
• To capture competitive advantages, searches out challenging opportunities to change, grow, innovate and improve;
• Compares information technology with those of significant competitors and makes appropriate adjustments;
• Coordinates the use of key people, resources, technologies, process, and capabilities to reach strategic goals;
• Sets an example by acting in ways that are consistent with shared department values;
• Fosters collaboration by promoting cooperative goals, building trust and enlisting others in a common vision;
• Strengthens staff by providing choice, developing competence and offering visible support;
• Focuses on continuous learning for self and staff;
• Actively acknowledges individual and team accomplishments;
• Leverages technological solutions to meet business needs;
• Participates in the recruitment and hiring of staff, including outreach, interview and selection;
• Performs related duties as required.

KNOWLEDGE, SKILL AND ABILITY

• Plan and Deploy for Business Results, which includes the ability to develop and implement business plans, IT plans, budget plans, and human resource plans in order to maximize budget allocations, technology, personnel and other resources to achieve agency and program goals.
• Lead Change, which includes innovation, the ability to be a creative problem solver and a strategic thinker, and the ability to recognize and develop opportunities to grow and develop information technology services in response to customers and a changing work environment.
• Focus on Results and Quality, including exercising and promoting accountability, and the ability to analyze surveys, financial and other data, and use strategic planning and performance measurement techniques to continuously improve performance and maintain competitiveness.
• Understand Customers and Markets, which includes the ability to establish customer satisfaction and loyalty, forecast and conduct market analyses, keep ahead of industry trends and incorporate “best practices” into information technology operations.
• Lead People, including the ability to resolve conflict, communicate effectively, coach and train employees, recognize performance, and foster diversity and teamwork.
• Build Coalitions, including the ability to explain and advocate facts and ideas in a convincing manner, to negotiate with individuals and groups internally and externally, to gain cooperation from others, and to identify the internal and external politics that impact the work of the organization.
• Business Knowledge, including knowledge of the technical, professional, procedural and legal requirements of the specific information technology area.

MINIMUM QUALIFICATIONS - GENERAL EXPERIENCE

• Ten (10) years of experience in computer or network administration, architecture, operations, production control, systems development, information technology analysis and planning.

MINIMUM QUALIFICATIONS - SPECIAL EXPERIENCE

• One (1) year of the General Experience must have been in a managerial capacity.

NOTE: For state employees this experience is interpreted at the level of an Information Technology Manager 2.

MINIMUM QUALIFICATIONS - SUBSTITUTIONS ALLOWED

• College training in computer science, management information systems or a closely related field may be substituted for the General Experience on the basis of fifteen (15) semester hours equalling one half (1/2) year of experience to a maximum of four (4) years for a Bachelor’s degree.
• A Master’s degree in computer science, management information systems or a closely related field may be substituted for one (1) additional year of the General Experience.

PREFERRED QUALIFICATIONS

• Possession of current Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC) or Certified Information Systems Auditor (CISA) certifications
• Experience supervising employees who perform information security functions
• Experience working in an information security compliance program in an organization subject to federal regulatory audit
• Experience establishing an enterprise information security program based on a recognized control framework
• Experience conducting security risk assessments that resulted in documented risk-acceptance decisions

Conclusion

AN AFFIRMATIVE ACTION/EQUAL OPPORTUNITY EMPLOYER

The State of Connecticut is an equal opportunity/affirmative action employer and strongly encourages the applications of women, minorities, and persons with disabilities.

ACKNOWLEDGEMENT

As defined by Sec. 5-196 of the Connecticut General Statutes, a job class is a position or group of positions that share general characteristics and are categorized under a single title for administrative purposes. As such, a job class is not meant to be all-inclusive of every task and/or responsibility.