Information Security Officer

Commonwealth of VA Careers; Chesterfield Court House (VA); Remote; USD 135,000 - 145,000; Full time

Job summary

VA Information Technologies Agency (VITA) is seeking an Information Security Officer to establish and mature the enterprise information security program, including policy, risk management, security architecture, incident response, and workforce training.

The ISO reports to the Commonwealth CISO and serves as the agency's principal security contact for leadership, auditors, and oversight bodies, with after-hours response during incidents and ongoing compliance monitoring.

Qualifications

• Extensive knowledge of IT security architecture and security control implementation.
• Extensive experience in security program management and incident response.
• Extensive experience building, leading, and managing an information security program.
• Extensive experience with enterprise IT systems and security tools.
• Extensive experience interpreting and applying federal and state laws, regulations, and security standards, including NIST SP 800-53 and the Commonwealth’s SEC-530 Information Security Standard.
• Extensive experience developing and implementing information security policies and standards.
• Knowledge and experience in strategic planning for information security programs.
• Experience in disaster recovery planning and the development and implementation of disaster recovery (DR) programs.

Responsibilities

• Develop, implement, and continuously mature security and data protection solutions that protect the confidentiality, integrity, and availability of VITA's information assets.
• Assess requirements and provide guidance on additional security services, promoting sound security practices agency wide.
• Develop new services, standards, and operating procedures that let the agency address information security risk and comply with applicable laws and regulations.
• Lead the agency's information security planning process to establish and maintain a comprehensive information security program, per SEC-530 Section 2.5.

Skills

IT security architecture

Security program management

Enterprise IT systems

Security standards (NIST SP 800-53)

Policies & standards development

Disaster recovery planning

Executive communication

Job description

Title: Information Security Officer

State Role Title:Info Technology Specialist III

Hiring Range: $135,000 - 145,000

Pay Band: 6

Agency: VA Information Tech Agency

Location:VA Information Technologies

Agency Website:https://www.vita.virginia.gov/

Recruitment Type: General Public - G

Job Duties

The Virginia Information Technologies Agency (VITA) is excited to offer a competitive opportunity to serve as an Information Security Officer with the Commonwealth Security Risk Management Division.

The Information Security Officer establishes, leads, and continuously matures VITA's enterprise information security program, encompassing security policy, risk management, security architecture, incident response, and workforce training.

The position's scope covers the entirety of VITA's information systems, applications, and data, and because VITA delivers shared technology services to other Commonwealth agencies, the security of VITA's own environment directly affects the agencies that depend on those services. The ISO reports organizationally within VITA while operating under the direction of the Commonwealth CISO and serves as the agency's principal point of contact on security matters for the Agency Head, external auditors, and oversight bodies.

This is a high-visibility, high-accountability position. The ISO is designated under Section 2.2-2009 of the Code of Virginia and is personally accountable to the Agency Head and the Commonwealth CISO for the security posture of the entire agency. The role requires sustained availability during active security incidents, including after-hours and weekend response to threats and breaches, and operates under continuous compliance and audit scrutiny.

Candidates should expect a demanding pace, direct exposure to executive leadership, and full accountability for outcomes affecting the confidentiality, integrity, and availability of VITA's information systems.

Core duties

• Develop, implement, and continuously mature security and data protection solutions that protect the confidentiality, integrity, and availability of VITA's information assets.
• Assess requirements and provide guidance on additional security services, promoting sound security practices agency wide.
• Develop new services, standards, and operating procedures that let the agency address information security risk and comply with applicable laws and regulations.
• Lead the agency's information security planning process to establish and maintain a comprehensive information security program, per SEC-530 Section 2.5.

Join VITA at The Boulders in Richmond, VA, where innovation meets impact! As the Commonwealth’s leading IT agency, we’re connecting, protecting, innovating, and powering Virginia’s digital future through collaboration, creativity, and purpose. Our team thrives in a vibrant, customer-focused environment that values growth, accountability, and forward thinking — all while making technology work for every corner of Virginia.

Minimum Qualifications

• Extensive knowledge of IT security architecture and security control implementation.
• Extensive experience in security program management and incident response.
• Extensive experience building, leading, and managing an information security program.
• Extensive experience with enterprise IT systems and security tools.
• Extensive experience interpreting and applying federal and state laws, regulations, and security standards, including NIST SP 800-53 and the Commonwealth’s SEC-530 Information Security Standard.
• Extensive experience developing and implementing information security policies and standards.
• Knowledge and experience in strategic planning for information security programs.
• Experience in disaster recovery planning and the development and implementation of disaster recovery (DR) programs.

Additional Considerations

• Knowledge of and experience with programs and operations within the Commonwealth’s shared IT services model.
• Knowledge of budgetary processes and principles.
• Professional CISSP (Certified Information Systems Security Professional) certification.
• Experience with project management and/or change management.

Special Instructions

This position is telework eligible.

Applicants must consent to a fingerprint background check.

The Commonwealth of Virginia welcomes all applicants authorized to work in the United States. Sponsorship is not provided; therefore, applicants must be a citizen or national of the U.S., a Lawful Permanent Resident, or an alien authorized to work.

State applications and/or resumes will only be accepted as submitted online by 11:55 p.m. on the closing date through the state applicant tracking system. We will not accept applications, resumes, cover letters, etc. in any other format. The decision to interview an applicant is based on the information provided in the application and/or resume.

Reasonable accommodations are available to persons with disabilities during the application and/or interview processes per the Americans with Disabilities Act.

VITA is a “Virginia Values Veterans” (V3) official certified state agency that provides hiring preference to Veterans and Members of the Virginia National Guard in support of Executive Order 29, (2010). If you are a Veteran or Virginia National Guard Member, we encourage you to apply and receive preference in the hiring process. AmeriCorps, Peace Corps and other national service alumni also are encouraged to apply.

Contact Information

Name: VITA Human Resources

Phone: [e-mail]

Email: [e-mail]

Note: Applicants who received a Certificate of Disability from DARS or DBVI dated between April 1, 2022- February 29, 2024, can still use that COD as applicable documentation for the Alternative Hiring Process.

In support of the Commonwealth’s commitment to inclusion, we are encouraging individuals with disabilities to apply through the Commonwealth Alternative Hiring Process. To be considered for this opportunity, applicants will need to provide their AHP Letter (formerly COD) provided by the Department for Aging & Rehabilitative Services (DARS), or the Department for the Blind & Vision Impaired (DBVI). Service-Connected Veterans are encouraged to answer Veteran status questions and submit their disability documentation, if applicable, to DARS/DBVI to get their AHP Letter. Requesting an AHP Letter can be found at AHP Letter or by calling DARS at 800-552-5019.