Strategic Information Security Leader

Lake County, IL; Waukegan (IL); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Flexible working hours

Wellness and training program

Job summary

Lake County Government is seeking an Information Security Officer (ISO) to lead the enterprise information security program, developing and directing security and privacy practices to protect Lake County’s information assets.

The ISO will orchestrate incident response, security audits, risk assessments, disaster recovery planning, and security awareness. You will ensure compliance with SOX, HIPAA, PCI, CJIS and applicable laws while guiding cross‑departmental risk management and controls.

Qualifications

• Eight or more years in a technology leadership role with at least five years in information security.
• Experience leading enterprise-wide security projects.
• Experience implementing or administering security frameworks (ITIL, COBIT, NIST) and guiding SOX, HIPAA, PCI, CJIS compliance.

Responsibilities

• Develop, implement, and maintain procedures and practices to ensure a high level of security for Lake County’s information systems and assets.
• Develop, maintain and enhance Incident and Response procedures to address security incidences (breaches).
• Coordinate the development and delivery of security awareness programs.
• Participate in Disaster/Recovery planning and testing.
• Conduct and coordinate security audits.
• Develop and implement an ongoing risk assessment program targeting information security; recommend methods for vulnerability detection and remediation, and oversee vulnerability and penetration testing to ensure the integrity, confidentiality and availability of information.
• Provide and present the latest legislation, regulation, advisories, alerts and vulnerabilities pertaining to Lake County’s security and privacy.
• Ensure that security programs are in compliance with relevant laws, regulations and policies to minimize or eliminate risk and audit findings.
• Manage regulatory and FOIA requests.
• Lead IT strategy planning activities, bringing a current knowledge and future vision of security best practices.
• Create, communicate and implement a process for vendor risk management.
• Create and manage information security and risk management awareness training programs for all employees, contractors and approved system users.
• Work cross-departmentally to facilitate IT risk assessment and risk management processes.
• Provide strategic risk guidance for IT projects, including the evaluation and recommendation of technical controls.

Skills

Technology leadership

Security governance

Risk management

Incident response

Education

Bachelor’s degree in technology or closely related discipline

CISSP, CISM, CISA or similar certifications preferred

Job description

Lake County Government is seeking an Information Security Officer (ISO) to lead the enterprise information security program, developing and directing security and privacy practices to protect Lake County’s information assets.

The ISO will orchestrate incident response, security audits, risk assessments, disaster recovery planning, and security awareness. You will ensure compliance with SOX, HIPAA, PCI, CJIS and applicable laws while guiding cross‑departmental risk management and controls.