Information Security Officer

Lake County, IL; Waukegan (IL); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Flexible working hours

Wellness and training program

Job summary

Lake County Government is seeking an Information Security Officer (ISO) to lead the enterprise information security program, developing and directing security and privacy practices to protect Lake County’s information assets.

The ISO will orchestrate incident response, security audits, risk assessments, disaster recovery planning, and security awareness. You will ensure compliance with SOX, HIPAA, PCI, CJIS and applicable laws while guiding cross‑departmental risk management and controls.

Qualifications

• Eight or more years in a technology leadership role with at least five years in information security.
• Experience leading enterprise-wide security projects.
• Experience implementing or administering security frameworks (ITIL, COBIT, NIST) and guiding SOX, HIPAA, PCI, CJIS compliance.

Responsibilities

• Develop, implement, and maintain procedures and practices to ensure a high level of security for Lake County’s information systems and assets.
• Develop, maintain and enhance Incident and Response procedures to address security incidences (breaches).
• Coordinate the development and delivery of security awareness programs.
• Participate in Disaster/Recovery planning and testing.
• Conduct and coordinate security audits.
• Develop and implement an ongoing risk assessment program targeting information security; recommend methods for vulnerability detection and remediation, and oversee vulnerability and penetration testing to ensure the integrity, confidentiality and availability of information.
• Provide and present the latest legislation, regulation, advisories, alerts and vulnerabilities pertaining to Lake County’s security and privacy.
• Ensure that security programs are in compliance with relevant laws, regulations and policies to minimize or eliminate risk and audit findings.
• Manage regulatory and FOIA requests.
• Lead IT strategy planning activities, bringing a current knowledge and future vision of security best practices.
• Create, communicate and implement a process for vendor risk management.
• Create and manage information security and risk management awareness training programs for all employees, contractors and approved system users.
• Work cross-departmentally to facilitate IT risk assessment and risk management processes.
• Provide strategic risk guidance for IT projects, including the evaluation and recommendation of technical controls.

Skills

Technology leadership

Security governance

Risk management

Incident response

Education

Bachelor’s degree in technology or closely related discipline

CISSP, CISM, CISA or similar certifications preferred

Job description

Are you looking for a challenging role within an organization that provides rewarding compensation, an excellent benefit package and career growth opportunities? If so, Lake County Government is the place for you. Comprised of nearly 3,000 employees, it is our goal to positively serve the residents of Lake County while working with a purpose. We believe our employees should take pride in the work they accomplish while truly respecting a collaborative work environment.

Lake County is seeking an Information Security Officer (ISO) with a track record of implementing security best practices at the enterprise level. This position will be responsible for developing, implementing, and directing a comprehensive information technology security and privacy program. The ISO is responsible for developing and monitoring practices to ensure that Lake County’s information systems are physically secure and available to authorized users and is responsible for executive guidance within IT risk management and the overall security posture of the organization. This position will continually prevent, identify, and mitigate security threats and vulnerabilities in Lake County's systems while assessing the amount of risk present and the cost and value of implementing controls and preventative measures. The ISO is responsible for promoting security awareness in the organization and ensuring compliance with statutory and regulatory requirements regarding information access, security, and privacy.

• Develop, implement, and maintain procedures and practices to ensure a high level of security for Lake County’s information systems and assets.
• Develop, maintain and enhance Incident and Response procedures to address security incidences (breaches); respond to alleged violations and/or complaints.
• Coordinate the development and delivery of security awareness programs.
• Participate in Disaster/Recovery planning and testing.
• Conduct and coordinate security audits.
• Develop and implement an ongoing risk assessment program targeting information security; recommend methods for vulnerability detection and remediation, and oversee vulnerability and penetration testing to ensure the integrity, confidentiality and availability of information.
• Provide and present the latest legislation, regulation, advisories, alerts and vulnerabilities pertaining to Lake County’s security and privacy.
• Ensure that security programs are in compliance with relevant laws, regulations and policies to minimize or eliminate risk and audit findings.
• Manage regulatory and FOIA requests.
• Lead IT strategy planning activities, bringing a current knowledge and future vision of security best practices.
• Create, communicate and implement a process for vendor risk management.
• Create and manage information security and risk management awareness training programs for all employees, contractors and approved system users.
• Work cross-departmentally to facilitate IT risk assessment and risk management processes.
• Provide strategic risk guidance for IT projects, including the evaluation and recommendation of technical controls.

• Excellent verbal and written communication skills and the ability to interact professionally with a diverse group of executives, managers, and subject matter experts
• 8+ years in a technology leadership position with at least 5 years in information security
• 5+ years of experience leading complex, enterprise-wide security projects
• 5+ years of experience implementing or administering common information security management frameworks such as ITIL, COBIT or NIST and leading organizations through SOX, HIPAA, PCI or CJIS compliance efforts

Education and/or Other Requirements

• Bachelor’s degree in technology or closely related discipline desired
• One or more of the following certifications preferred: CISSP, CISM, CISA or similar

Physical Requirements:

• Requires mainly office work, involving standing or walking some of the time, exerting up to 10 pounds of force on a regular basis, and high dexterity in operating office equipment, including a keyboard, phone, copier, etc.
• The position requires normal visual acuity and field of vision and the ability to hear and speak to understand, respond to and build relationships with a diverse clientele.

• Lake County offers a competitive salary and benefit package.
• We also offer flexible working hours, and a comprehensive wellness and training program.
• Visit our Prospective Employee page to get additional information on why you should work for Lake County!

Any offer of employment is contingent upon the successful completion of a background screening, drug testing, and may include a pre-employment medical exam.

Lake County is committed to being a diverse and inclusive workplace and is proud to be an Equal Opportunity Employer.