Deputy CISO & IT Governance Leader (Hybrid)

State of Connecticut; Hartford (CT); Hybrid; USD 130,000 - 180,000; Full time

Job summary

The State of Connecticut, Department of Administrative Services, Bureau of Information Technology Solutions (BITS) is recruiting for a Deputy Chief Information Security Officer to help lead information security for the Connecticut executive branch. The role oversees compliance across regulated data and leads audits, policy development and enterprise security initiatives.

The Deputy CISO reports to the CISO and will drive risk-based decision making, coordinate regulatory examinations, and manage

Qualifications

• Ten years of IT/security experience; managerial experience required.
• Substitutions: college training may substitute for experience; master’s degree may substitute for one additional year.
• Familiarity with enterprise security frameworks and regulatory audits.

Responsibilities

• Direct the enterprise security compliance program for regulated data (PCI DSS, IRS 1075, HIPAA, CJIS, SSA).
• Oversee security risk assessments of state, agencies and vendor systems; maintain risk decision records.
• Plan security audits and coordinate agency responses to regulatory examinations.
• Lead enterprise information security priorities and standards in collaboration with the CISO.
• Develop, update and maintain security policy, standards, and the security roadmap.

Skills

Leadership

Regulatory compliance

Security risk assessments

Enterprise security program

Audits & controls

Education

Bachelor’s degree in CS/IT

Master’s degree preferred

Job description

The State of Connecticut, Department of Administrative Services, Bureau of Information Technology Solutions (BITS) is recruiting for a Deputy Chief Information Security Officer to help lead information security for the Connecticut executive branch. The role oversees compliance across regulated data and leads audits, policy development and enterprise security initiatives.

The Deputy CISO reports to the CISO and will drive risk-based decision making, coordinate regulatory examinations, and manage