Information Security Officer #00111 (State Employee only)

Commonwealth of VA Careers; Richmond (VA); On-site; USD 131,000 - 160,000; Full time

Job summary

State Council of Higher Education for Virginia (SCHEV) seeks an Information Security Officer to serve as the agency’s senior authority on information security, governance, and compliance with statewide IT standards. The ISO will develop and maintain security controls protecting SCHEV’s data, systems, and networks, and lead audits and risk assessments.

The role also coordinates with VITA, vendors, and agency leadership to ensure strategic IT planning, procurement oversight, and continuity

Qualifications

• Experience in IT operations, IT security, and/or VITA relationship management.
• Knowledge of information systems management practices, security controls, and tools for the planning, management, and oversight of information technology systems.
• Excellent written and verbal communication skills, with the ability to work collaboratively with agency users, leadership, and external partners.
• Strong analytical and problem solving skills, including the ability to manage and prioritize multiple tasks and projects effectively.

Responsibilities

• Lead incident response activities and coordinate corrective action plans for audit findings.
• Oversee compliance with statewide IT standards and participate in risk assessments and audits.
• Develop and maintain security controls that protect SCHEV’s information systems and data.

Skills

IT operations

IT security

VITA relationship management

Information systems management

Stakeholder collaboration

Job description

Title: Information Security Officer #00111 (State Employee only)

State Role Title: Info Technology Specialist III

Hiring Range: Commensurate with experience up to $145,000

Pay Band: 6

Agency: State Council of Higher Educ

Location: State Council of Higher Educ

Agency Website: https://www.schev.edu/

Recruitment Type: State Employee Only - E

Job Duties

About the Organization

The State Council of Higher Education for Virginia (SCHEV) is the coordinating body for the nation’s preeminent system of postsecondary education. SCHEV is responsible for: developing and promoting an educationally and economically sound, vigorous, progressive and coordinated system of higher education; facilitating collaboration among postsecondary institutions that enhances academic quality and operational efficiency; developing and submitting recommendations to the executive and legislative branches on budgetary and policy matters; and providing advisory and/or regulatory guidance to the institutions.

SCHEV’s mission is to “promote the development and operation of an educationally and economically sound, vigorous, progressive and coordinated system of higher education.” The Agency’s mission is for “SCHEV to be the recognized source for accurate information, meaningful innovation, and informed leadership in higher education.” SCHEV staff members work to ensure access and equity to the State’s colleges and universities for all individuals who can take advantage of the educational opportunities provided on campuses.

In 2026, the SCHEV Council (board) adopted a new statewide strategic plan for postsecondary education. Developing Tomorrow’s Talent: The Virginia Plan for Higher Education sets goals and strategies to address issues the Commonwealth likely will face over the next six years. The plan provides a roadmap for Virginia to be the “Top State for Talent” by 2032. In so doing, the plan will fulfill its objectives of ensuring the readiness of students and graduates, the responsiveness of colleges and universities, and the relevance of higher education.

About the Position

The Information Security Officer (ISO) serves as SCHEV’s senior authority on information security, technology governance, and compliance with statewide IT standards. This position is responsible for developing, implementing, and maintaining security controls that protect the confidentiality, integrity, and availability of SCHEV’s systems, applications, networks, and data. The ISO ensures agency-wide alignment with Commonwealth of Virginia (COV) information security and technology policies, oversees the security components of application design, and manages agency participation in mandatory audits and risk assessments.

The ISO leads incident response activities, conducts business impact analyses and system sensitivity assessments, and coordinates corrective action plans for audit findings. The position administers account lifecycle security, monitors risk associated with software requests, and ensures agency staff receive ongoing cybersecurity awareness and training.

In addition to serving as the chief security officer, the ISO also functions as SCHEV’s designated Agency Information Technology Resource (AITR). In this role, the ISO leads IT strategic planning, manages SCHEV’s technology investment portfolio, evaluates and coordinates IT procurements, oversees contractor and VITA-related billing, ensures compliance with statewide standards, and facilitates communication between VITA, vendors, and agency leadership. The ISO develops IT policies and continuity planning components, coordinates telecommunications services, and ensures agency technology systems and investments support SCHEV’s mission, strategic plan, operational requirements, and regulatory obligations.

Through these responsibilities, the ISO ensures SCHEV maintains a resilient, secure, compliant, and efficient technology environment aligned with the needs of the agency and the Commonwealth.

Minimum Qualifications

• Extensive understanding of information technology, including systems, networks, databases, telecommunications, storage systems, and practical applications that support agency operations.
• Experience in IT operations, IT security, and/or VITA relationship management.
• Knowledge of practices and tools for the effective planning, control and management of information systems technology.
• Demonstrated ability to provide innovative and creative business solutions to changes in integrated systems technology and software applications.
• Demonstrated knowledge of information systems management practices, security controls, and tools for the planning, management, and oversight of information technology systems.
• Experience demonstrating the ability to develop, manage, and use diverse technologies; provide technical and business support to staff; and deliver program training to diverse stakeholders of varying levels of technical expertise.
• Knowledge of and experience with information systems technology and database management.
• Excellent written and verbal communication skills, with the ability to work collaboratively with agency users, leadership, and external partners.
• Experience demonstrating the ability to promote innovation, teamwork/consensus-building, and provide customer service to diverse professionals and stakeholders.
• Strong analytical and problem solving skills, including the ability to manage and prioritize multiple tasks and projects effectively.

Additional Considerations

• Familiarity with multiple programming languages or complex computer operations.
• A work history demonstrating considerable information systems management experience within the Commonwealth of Virginia.
• Budget experience demonstrating the ability to monitor and track program budget expenditures and procurement activities.
• Certification as a VITA Certified Information Security Officer.
• Experience coordinating with external IT service providers, including VITA, hosting providers, and contractors.
• Experience developing IT strategic plans, continuity plans, or security program components.
• Experience conducting or supporting IT audits, risk assessments, incident response, and business impact analyses.

SCHEV values honesty, quality, diversity, inclusion, growth-orientation, personal well-being, equity, transparency, and accountability. EEO Employer

Contact Information

Name: Taris Harmon

Phone: [phone]

Email: [e-mail]

In support of the Commonwealth’s commitment to inclusion, we are encouraging individuals with disabilities to apply through the Commonwealth Alternative Hiring Process. To be considered for this opportunity, applicants will need to provide their AHP Letter (formerly COD) provided by the Department for Aging & Rehabilitative Services (DARS), or the Department for the Blind & Vision Impaired (DBVI). Service-Connected Veterans are encouraged to answer Veteran status questions and submit their disability documentation, if applicable, to DARS/DBVI to get their AHP Letter. Requesting an AHP Letter can be found at AHP Letter or by calling DARS at 800-552-5019.

Note: Applicants who received a Certificate of Disability from DARS or DBVI dated between April 1, 2022- February 29, 2024, can still use that COD as applicable documentation for the Alternative Hiring Process.