Sr. Business SME - Agency Information Security Officer

Codetech • Augusta, ME

3d

About The Position

The Agency Information Security Officer provides consultative, professional security advice and expertise to agency and executive management and serves as the agency subject matter expert on information security. The position works with agencies and MaineIT divisions to identify, assess, prevent, protect against, and mitigate information security risks, threats, and vulnerabilities. It is a central point of contact for agencies on security matters, supporting strategic planning, operational needs, incident response, and regulatory compliance.

The officer collaborates with agencies and MaineIT to strengthen the State’s security posture, align security initiatives with business goals, and support the State of Maine Information Security Program Plan. The role exercises independent judgment on critical security matters and works with stakeholders to integrate security strategies into agency objectives and operations. Responsibilities include policy and standards guidance, risk management, incident response, third-party risk evaluation, audit support, emerging-threat assessment, and business continuity and disaster recovery planning.

Requirements

• 5 to 7 years of experience in a leadership role, information security, relationship management, and cross-functional goal achievement.
• Bachelor’s degree in information technology or a related field; four years of direct information security consultancy experience may be used in lieu of a degree.
• Expertise working with Security and Privacy Controls for Information Systems and Organizations established by the National Institute of Standards and Technology (NIST).
• Ability to pass required background checks.
• Network security.

Nice To Haves

• Proactive use of time and sound independent decision-making.
• Ability to build coalitions among supported agencies for efficient information security program management.
• Subject matter expertise, or capacity to become an expert, in the role’s essential functions.
• Ability to balance information security, agency business functions, and statewide risk.
• Experience with support functions such as consolidated data centers, shared print facilities, and disaster recovery sites as they relate to regulatory compliance for federally protected data types.

Responsibilities

• Collaborate with agencies and MaineIT to assess security continuously, implement proactive measures, and align security initiatives with business goals.
• Exercise independent judgment on security matters, including risk assessments, resource allocation, and policy implementation.
• Work with sections of the Information Security Office to implement and support the State of Maine Information Security Program Plan.
• Engage agency stakeholders to integrate security strategies with business objectives, missions, and regulatory compliance needs.
• Serve as the primary escalation point for cybersecurity issues and coordinate timely resolution to minimize risk and maintain business continuity.
• Develop, review, and enforce security policies, standards, and best practices to support compliance with state and federal regulations.
• Conduct security risk assessments, analyze findings, and recommend remediation strategies.
• Assist with security incident investigations, coordinate response efforts, and guide incident containment, remediation, and reporting.
• Evaluate vendor and third-party security controls for compliance with state security requirements and industry standards.
• Support internal and external security audits by providing documentation and guidance.
• Monitor evolving cybersecurity threats, technologies, and best practices and recommend improvements to agency defenses.
• Collaborate with agencies to develop and test business continuity and disaster recovery plans.

What This Job Offers

• Career Level: Senior