IT Statewide Infosec Officer 1, 2 (50700431, Infosec)

State of Louisiana; Baton Rouge (LA); On-site; USD 75,000 - 110,000; Full time

Job summary

The Division of Administration/Office of Technology Services in Baton Rouge, LA has a vacancy for an Information Security Compliance Officer within the Infosec section. This role reports to the Director of Compliance and Risk Management and collaborates with the State's Information Security Team.

The incumbent will monitor, validate, and improve internal and external control mechanisms, coordinating with State and Federal agencies to reduce risk to acceptable levels while aligning with

Qualifications

• Six years of information technology experience or equivalent
• Experience substitutions per state rules apply as listed in notes
• Familiarity with privacy and information security standards preferred

Responsibilities

• Serve as Information Security Compliance Officer and liaison for CJIS, IRS, CMS, SSA
• Coordinate statewide information security compliance activities
• Review contracts and data use agreements for privacy and security
• Develop and monitor compliance frameworks for PHI, PII, FTI, PCI DSS, FERPA, CJIS
• Provide risk management guidance and identify control gaps
• Collaborate with Privacy Officers and Legal Counsel on policies and incident response

Skills

IT risk management

Contract review

Regulatory compliance

Information security

Stakeholder consulting

Education

Six years IT experience

4 years IT + 6 years in any field

Associate's degree in IT + 4 years IT

Bachelor's degree + 4 years IT

Bachelor's degree + 24 sem hrs IT/CS/ENG/Analytics + 3 years IT

Master's degree + 3 years IT

Tools

None

Job description

The Division of Administration/Office of Technology Services has a vacancy. This position is located in the Infosec section. Req. 228158

The Office of Technology Services aims to be a responsible partner in delivering innovative, effective, and reliable solutions that support and enhance the IT functions within Executive Branch Departments. The Office of Technology Services will work to increase the return on the State's investment in technology by promoting smart decision‑making, solving problems intelligently, increasing the rate of project success, and fostering a skilled and professional staff.

This position is within the Office of Technology Services (OTS) and serves as an information security compliance subject matter expert by providing guidance, recommendations, and consulting with various key stakeholders within state agencies and operational OTS service areas on matters related to information security. This position receives direction and priority from the Director of Compliance and Risk Management while working alongside additional members of the State's Information Security Team.

This position is additionally responsible for monitoring, validating, and improving internal and external control mechanisms, while enabling and coordinating with State and Federal agencies to work effectively and productively. This position is primarily dedicated to identifying and reducing risk to an acceptable level while striving to align with operation goals and objectives to ensure the recommendations provided support and enable the operational needs of the State.

As an assigned member of the Information Security Team, this position will perform each duty with the highest level of integrity and confidentiality while supporting assigned agencies and OTS service areas with excellent customer service and unwavering professionalism.

The Division of Administration is the state government’s management arm and the hub of its financial operations. Division offices perform a wide variety of activities including the following:

• Overseeing the state’s capital construction program
• Working to provide state and federal grants for community development
• Development of the state budget
• Providing technology services
• Giving agencies guidance in the state purchasing and contracting process as they seek goods and services
• Administering a program that provides federal funds to help Louisiana residents recover from a series of devastating hurricanes

• Six years of experience in information technology; OR
• Six years of full-time work experience in any field plus four years of experience in information technology; OR
• An associate's degree in information technology plus four years of experience in information technology; OR
• A bachelor’s degree plus four years of experience in information technology; OR
• A bachelor’s degree with twenty-four semester hours in an information technology, computer science, engineering, mathematics, or business analytics field plus three years of experience in information technology; OR
• A master's degree plus three years of experience in information technology.

EXPERIENCE SUBSTITUTION: Every 30 semester hours earned from an accredited college or university will be credited as one year of experience towards the six years of full-time work experience in any field. The maximum substitution allowed is 120 semester hours which substitutes for a maximum of four years of experience in any field.

NOTE: A certification in an approved area may be substituted for the education and/or experience requirements at the time of hire or promotion, provided the appointment is made from a Certificate of Eligibles.

The official job specifications for this role, as defined by the State Civil Service, can be found here.

Job Duties

• Serve as an Information Security Compliance Officer and federal/state liaison for FBI Criminal Justice Information Services Division (CJIS), Internal Revenue Service (IRS), Centers for Medicare and Medicaid Services (CMS), and Social Security Administration (SSA).
• Supports the Director of Compliance and Risk Management in coordinating and overseeing statewide information security compliance activities, including compliance with applicable state and federal laws, regulations, and security frameworks, in collaboration with senior OTS Information Security Officers.
• Reviews and provides recommendations on all contractual instruments such as Contracts, Memoranda of Understanding (MOUs), Data Sharing Agreements (DSAs), and Data Use Agreements (DUAs) to ensure compliance with privacy and information security standards, and to safeguard the confidentiality, integrity, and availability of sensitive information shared between customer agencies or with third parties.
• Assists in the development, implementation, and monitoring of compliance frameworks addressing various Federal and State regulations, including but not limited to: Protected Health Information (PHI), Personally Identifiable Information (PII), Federal Tax Information (FTI), Payment Card Industry Data Security Standard (PCI DSS), Family Educational Rights and Privacy Act (FERPA), Social Security Administration (SSA), and Criminal Justice Information Services (CJIS) requirements.
• Provides guidance and subject matter expertise in information security risk management across enterprise initiatives. This includes conducting risk assessments, identifying control gaps, and recommending mitigation strategies to support secure systems development and operations
• Coordinates with agency Information Privacy Officers and Legal Counsel to align security and privacy compliance efforts. This includes collaborative development and enforcement of policies, procedures, and incident response protocols to ensure consistent application of regulatory requirements.
• Performs all other tasks, special projects, analysis, studies, and plans as directed by OTS Leadership.

Position-Specific Details

Appointment Type: This vacancy will be filled by a new hire or by promotion of a current permanent status classified employee.

Career Progression: This vacancy participates in a career progression group and may be filled from this recruitment as an IT Statewide Infosec Officer 1 or 2.

Compensation: The salary range listed on the job posting reflects the pay grade minimum and maximum for the IT Statewide Infosec Officer 1 job title. The salary range pay grade minimum and maximum for the other levels of the career progression group can be viewed using the links below: IT Statewide Infosec Officer 2

Louisiana is a "State as a Model Employer" for People with Disabilities.

For further information about this vacancy, contact: Danielle Martin HR Analyst Division of Administration/Office of Human Resources email: [e-mail]