Senior Information Security Strategist – Governance & Risk

AllSTEM Connections; Topeka (KS); On-site; USD 95,000 - 140,000; Full time

Job summary

AllSTEM Connections is seeking a seasoned information security leader to develop and implement agency-wide security policies aligned with statewide standards. The role leads risk management and third-party evaluations and serves as the primary liaison with the Kansas Information Security Office.

You will conduct compliance assessments for CJIS, HIPAA, IRS Pub 1075 and guide IT projects with security best practices, coordinating incident response and staff training.

Qualifications

• Eleven (11) years of direct experience in information security.
• At least three (3) years of direct information security experience.
• Certifications or ability to obtain within one year.
• Familiarity with government/public sector environments.
• Knowledge of CJIS, HIPAA, IRS Pub 1075 and related regs.

Responsibilities

• Develop, implement, and maintain agency security policies and procedures aligned with KISO strategy.
• Lead risk assessments, mitigation planning, and third-party risk evaluations.
• Liaise between agency and KISO to implement statewide cybersecurity initiatives.
• Conduct compliance assessments and support audits for CJIS, HIPAA, IRS Pub 1075, etc.
• Collaborate with leadership and IT teams to integrate security into operations and projects.
• Coordinate incident response, containment, and root cause analysis.
• Provide security awareness training to agency staff.

Skills

NIST CSF knowledge

Policy development

Security strategy presentation

Leadership & PM

Regulatory assessment

Technical documentation reading

Education

CISSP/CISM/CISA certification

Public sector familiarity

Regulatory knowledge (CJIS/HIPAA/IRS Pub 1075)

Job description

AllSTEM Connections is seeking a seasoned information security leader to develop and implement agency-wide security policies aligned with statewide standards. The role leads risk management and third-party evaluations and serves as the primary liaison with the Kansas Information Security Office.

You will conduct compliance assessments for CJIS, HIPAA, IRS Pub 1075 and guide IT projects with security best practices, coordinating incident response and staff training.