Information Security Officer — Lead, Risk & Compliance (Hybrid)

Unisys Corporation; Richmond (VA); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Unisys Corporation seeks an Information Security Officer to lead cybersecurity delivery and governance for a Virginia statewide client. You will guide risk-based security programs, coordinate with client leadership and Unisys teams, and ensure compliance with NIST controls and agency standards.

Key responsibilities include overseeing security delivery, incident response, policy development, and ongoing security improvements. Onsite with some remote days, strong communication is essential.

Qualifications

• Bachelor's degree in information security, Computer Science, IT, or related field; equivalent experience considered.
• 10+ years of cybersecurity or information assurance experience.
• Strong understanding of NIST frameworks (800-53, 800-37, CSF).
• Knowledge of Commonwealth of Virginia security standards (SEC 501, 525, 530).
• Zero Trust principles and modern security architecture.
• Experience with risk assessments, audits, and implementing security controls.
• Incident response or SOC coordination experience.
• Excellent communication, documentation, and stakeholder engagement skills.
• Experience applying AI in delivery to meet contractual obligations.

Responsibilities

• Security Delivery Lead for Unisys services and client cybersecurity matters.
• Service Delivery Manager for cybersecurity services and solutions provided to the client.
• Technical lead for cybersecurity professionals in a matrixed organization.
• Provide updates for Unisys leadership related to cybersecurity delivery.
• Escalation point for internal Unisys cybersecurity issues affecting the client.
• Develop and maintain agency-aligned security policies, controls, and docs.
• Assist audits, compliance reviews, and remediation planning per contract obligations.
• Ensure adoption of NIST-aligned risk management and security controls.
• Conduct or assist with enterprise risk assessments and data classification.
• Identify security gaps and recommend risk-based remediation strategies.
• Support SSPs, BIAs, and agency risk registers development.
• Provide COOP and Incident Response Plan guidance.
• Coordinate with SOC, Fusion Center, and agency staff during incidents.
• Deliver after-action reporting and improvement recommendations.
• Review IT designs, contracts, and procurements for security controls.
• Offer security guidance on Zero Trust, identity management, encryption, logging, and network security.
• Support awareness programs and stakeholder coordination across agencies.
• Contribute to enterprise cybersecurity strategy and statewide initiatives.

Skills

Cybersecurity leadership

Risk management

Incident response

Security governance

Compliance

Zero Trust

Stakeholder engagement

Documentation

AI in delivery

Education

Bachelor's degree in information security, Computer Science, IT, or related field

Job description

Unisys Corporation seeks an Information Security Officer to lead cybersecurity delivery and governance for a Virginia statewide client. You will guide risk-based security programs, coordinate with client leadership and Unisys teams, and ensure compliance with NIST controls and agency standards.

Key responsibilities include overseeing security delivery, incident response, policy development, and ongoing security improvements. Onsite with some remote days, strong communication is essential.