Information Security Officer

Commonwealth of VA Careers; Henrico (VA); Presencial; USD 110.000 - 130.000; Tempo integral

Benefícios oferecidos por esta vaga

Health benefits

13 state holidays

Volunteer time off

VRS retirement

Free parking

Resumo da vaga

Commonwealth of VA Careers is seeking an Information Security Officer to lead the agency's information security and risk management program at the DPOR Main Office. This role focuses on protecting information systems, data, and networks while aligning with Virginia security standards and evolving cybersecurity practices.

The incumbent will oversee governance, risk, and compliance efforts, coordinate disaster recovery planning, and communicate security posture to leadership and stakeholders.

Qualificações

• Experience as Information Security Officer or in senior information security roles.
• Leadership in large, complex IT environments with growing responsibilities.
• Experience building and managing information security programs (governance, risk, compliance, operations).
• Knowledge of information security architecture, frameworks, and controls.
• Experience in incident management and remediation.
• Familiarity with federal/state laws, SEC-530, and security standards.

Responsabilidades

• Provide leadership and oversight for the agency's information security program.
• Ensure compliance with Commonwealth security standards and best practices.
• Protect DPOR information systems, networks, and data from threats.
• Develop and maintain disaster recovery and business continuity plans.
• Collaborate with leadership and stakeholders to implement policies and controls.
• Monitor compliance, perform risk assessments, and report on security posture.

Conhecimentos

Security leadership

Governance

Risk management

Incident response

Security architecture

Compliance knowledge

Strategic planning

Disaster recovery

Stakeholder comms

Splunk

Ferramentas

Splunk

Descrição da vaga

Title: Information Security Officer

State Role Title:Info Technology Specialist III

Hiring Range: $110,000 - $130,000

Pay Band: 6

Agency: Dept of Prof & Occup Reg

Location:DPOR Main Office

Agency Website:www.dpor.virginia.gov

Recruitment Type: General Public - G

Job Duties

This position provides leadership and oversight for the agency's information security and risk management program, ensuring compliance with Commonwealth of Virginia information security standards and alignment with evolving cybersecurity best practices.

The incumbent is responsible for protecting DPOR's information systems, applications, networks, data, and other technology assets from security threats and vulnerabilities. This role is essential to maintaining the confidentiality, integrity, and availability of agency information resources and supporting the agency's overall mission and operations.

This position is not eligible for sponsorship or F-1 (I-983 (STEM OPT Training Plan) STEM OPT STUDENTS).

This position is not a full-time telework position. Upon hire into this position, the agency requires the incumbent to be in the position for 90 days before a specific telework schedule may be submitted for consideration.

Minimum Qualifications

• Significant experience serving as an Information Security Officer (ISO), IT Security Analyst, or in progressively responsible information security roles.
• Demonstrated leadership experience in large, complex IT environments, with increasing levels of responsibility.
• Extensive experience developing, implementing, and managing comprehensive information security programs, including governance, risk management, compliance, and security operations.
• Extensive knowledge of information security architecture, cybersecurity frameworks, and security control implementation.
• Extensive experience in cybersecurity incident management, response, recovery, and remediation.
• Extensive experience with enterprise technology environments, including systems, networks, applications, and security tools.
• Comprehensive knowledge of federal and state laws, regulations, policies, and security standards, including the Commonwealth of Virginia's SEC-530 Information Security Standard.
• Extensive experience developing, implementing, and maintaining information security policies, standards, procedures, and governance frameworks.
• Experience with strategic planning, program development, and long-term security initiatives.
• Experience developing, testing, and maintaining disaster recovery and business continuity plans to ensure operational resilience.
• Demonstrated ability to think critically, analytically, and strategically, while proactively identifying and addressing risks and challenges.
• Strong ability to analyze complex issues, evaluate alternatives, and develop effective, practical solutions.
• Ability to identify, assess, and mitigate security, operational, and compliance risks.
• Ability to monitor systems, processes, and practices for compliance with applicable policies, standards, regulations, and security requirements.
• Ability to conduct cost-benefit analyses and provide recommendations that support sound business and security decisions.
• Ability to analyze and interpret information from multiple sources and develop recommendations that improve operational effectiveness, security, and risk management.
• Strong organizational skills, including the ability to prepare, maintain, and manage accurate documentation, detailed records, and comprehensive reports.
• Excellent verbal and written communication skills, with the ability to effectively communicate technical and non-technical information to staff, leadership, and external stakeholders.
• Demonstrated ability to collaborate effectively with leadership, peers, and stakeholders and to influence the adoption of information security policies, standards, and best practices.

Additional Considerations

• Currently holds at least one of the following industry-recognized information security certifications: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), or Certified in Risk and Information Systems Control (CRISC).
• Working experience with Splunk.

Benefits

• Affordable and comprehensive health benefits
• 13 paid state holidays.
• Time off to volunteer, as well as vacation, sick, and personal leave.
• Participation in the VRS retirement system.
• Free parking on the premises (DPOR).

DPOR is an Equal Opportunity Employer

Note: Applicants who received a Certificate of Disability from DARS or DBVI dated between April 1, 2022- February 29, 2024, can still use that COD as applicable documentation for the Alternative Hiring Process.

Contact Information

Name: Human Resources

Phone: [phone]

Email: [e-mail]