This role serves as an information security compliance subject matter expert within the Office of Technology Services’ Infosec section. The position supports statewide compliance efforts by coordinating control and risk requirements, and by acting as a federal/state liaison for specified organizations.
Role Overview
As an Information Security Compliance Officer, you will provide guidance and coordination on compliance, risk management, and control mechanisms. You will support statewide information security compliance activities and provide liaison support for federal and state stakeholders identified for this role.
Key Responsibilities
- Serve as an Information Security Compliance Officer and federal/state liaison for the FBI Criminal Justice Information Services Division (CJIS), Internal Revenue Service (IRS), Centers for Medicare and Medicaid Services (CMS), and Social Security Administration (SSA).
- Support the Director of Compliance and Risk Management in coordinating and overseeing statewide information security compliance activities, including compliance with applicable state and federal laws, regulations, and security frameworks, in collaboration with senior OTS Information Security Officers.
- Review and provide recommendations on contractual instruments, including Contracts, Memoranda of Understanding (MOUs), Data Sharing Agreements (DSAs), and Data Use Agreements (DUAs), to ensure compliance with privacy and information security standards and to protect the confidentiality, integrity, and availability of sensitive information shared between customer agencies or with third parties.
- Assist with developing, implementing, and monitoring compliance frameworks for Federal and State regulations, including requirements related to Protected Health Information (PHI), Personally Identifiable Information (PII), Federal Tax Information (FTI), Payment Card Industry Data Security Standard (PCI DSS), Family Educational Rights and Privacy Act (FERPA), Social Security Administration (SSA), and CJIS.
- Provide guidance and subject matter expertise in information security risk management across enterprise initiatives, including conducting risk assessments, identifying control gaps, and recommending mitigation strategies to support secure system development and operations.
- Coordinate with agency Information Privacy Officers and Legal Counsel to align security and privacy compliance efforts, including collaborative development and enforcement of policies, procedures, and incident response protocols.
- Perform other tasks, special projects, analysis, studies, and plans as directed by OTS Leadership.
Minimum Requirements
- Six years of experience in information technology; or
- Six years of full-time work experience in any field plus four years of information technology experience; or
- An associate’s degree in information technology plus four years of information technology experience; or
- A bachelor’s degree plus four years of information technology experience; or
- A bachelor’s degree with twenty-four semester hours in an information technology, computer science, engineering, mathematics, or business analytics field plus three years of information technology experience; or
- A master’s degree plus three years of information technology experience.
Experience substitution: Every 30 semester hours earned from an accredited college or university will be credited as one year of experience toward the six years of full-time work experience in any field (maximum substitution allowed is 120 semester hours, substituting for up to four years).
Note: A certification in an approved area may be substituted for the education and/or experience requirements at the time of hire or promotion, provided the appointment is made from a Certificate of Eligibles.
Appointment and Career Progression
- Appointment Type: The vacancy will be filled by a new hire or by promotion of a current permanent status classified employee.
- Career Progression: This vacancy participates in a career progression group and may be filled from this recruitment as an IT Statewide Infosec Officer 1 or 2.
Location
Application Information
- No Civil Service test score is required to be considered.
- Resumes will not be accepted in lieu of completed education and experience sections on the application. Applications may be rejected if incomplete.
- Prior to a new hire, a background check including a criminal record check will be conducted.
- A criminal history check may be conducted on employees changing positions, including promotions, demotions, details, reassignments, and transfers.
- Prospective employees may be subject to pre-employment drug testing.
- New hires will be subject to employment eligibility verification via the federal government’s E-Verify system.
- Information supporting eligibility for this job title must be included in the application, including relevant detailed experience and education.
Compensation
The salary range shown in the job posting reflects the pay grade minimum and maximum for the IT Statewide Infosec Officer 1 job title.