Senior Information Security Officer | Risk & Compliance

Commonwealth of VA Careers; Henrico (VA); On-site; USD 110,000 - 130,000; Full time

Benefits offered by this job

Health benefits

13 state holidays

Volunteer time off

VRS retirement

Free parking

Job summary

Commonwealth of VA Careers is seeking an Information Security Officer to lead the agency's information security and risk management program at the DPOR Main Office. This role focuses on protecting information systems, data, and networks while aligning with Virginia security standards and evolving cybersecurity practices.

The incumbent will oversee governance, risk, and compliance efforts, coordinate disaster recovery planning, and communicate security posture to leadership and stakeholders.

Qualifications

• Experience as Information Security Officer or in senior information security roles.
• Leadership in large, complex IT environments with growing responsibilities.
• Experience building and managing information security programs (governance, risk, compliance, operations).
• Knowledge of information security architecture, frameworks, and controls.
• Experience in incident management and remediation.
• Familiarity with federal/state laws, SEC-530, and security standards.

Responsibilities

• Provide leadership and oversight for the agency's information security program.
• Ensure compliance with Commonwealth security standards and best practices.
• Protect DPOR information systems, networks, and data from threats.
• Develop and maintain disaster recovery and business continuity plans.
• Collaborate with leadership and stakeholders to implement policies and controls.
• Monitor compliance, perform risk assessments, and report on security posture.

Skills

Security leadership

Governance

Risk management

Incident response

Security architecture

Compliance knowledge

Strategic planning

Disaster recovery

Stakeholder comms

Splunk

Tools

Splunk

Job description

Commonwealth of VA Careers is seeking an Information Security Officer to lead the agency's information security and risk management program at the DPOR Main Office. This role focuses on protecting information systems, data, and networks while aligning with Virginia security standards and evolving cybersecurity practices.

The incumbent will oversee governance, risk, and compliance efforts, coordinate disaster recovery planning, and communicate security posture to leadership and stakeholders.