Hybrid Chief Information Security Officer

Illinois Comptroller; Springfield, Northern (IL, KY); Hybrid; USD 89,000 - 149,000; Full time

Job summary

The Illinois Department of Corrections seeks a Chief Information Security Officer on a contractual basis to lead the agency's information security program, aligning with NIST standards, HIPAA, and FBI CJIS policies, and managing risk across the department.

The role oversees security operations, incident response, audits, and training, requiring at least five years of information security experience and the ability to pass the required background checks for a headquarters-based position in

Qualifications

• Requires Bachelor’s degree in information security, computer science, information technology, or closely related field.
• Requires minimum five (5) years of progressively responsible professional experience in information security, including policy development and risk management.
• Demonstrated knowledge of NIST security standards, FBI CJIS Security Policy, and HIPAA Security Rule.

Responsibilities

• Lead the Department's information security program with enterprise scope and action plans.
• Act as designated security official for regulated data and HIPAA/CJIS compliance obligations.
• Direct security operations, incident response, and breach notification activities.
• Coordinate audits, attestations, and remediation with oversight bodies.
• Plan and deliver information security training and awareness across the Department.
• Perform other duties as required within the role.

Skills

Information security

Risk management

NIST standards

HIPAA Security Rule

CJIS Policy

Education

Bachelor’s degree in information security/computer science/IT

Job description

The Illinois Department of Corrections seeks a Chief Information Security Officer on a contractual basis to lead the agency's information security program, aligning with NIST standards, HIPAA, and FBI CJIS policies, and managing risk across the department.

The role oversees security operations, incident response, audits, and training, requiring at least five years of information security experience and the ability to pass the required background checks for a headquarters-based position in