Agency Information Security Officer

Knowledge Services • Augusta, ME

1d • Hybrid

About The Position

Knowledge Services is seeking an Agency Information Security Officer for a contract through the end of June 2027 (potential for extension) with the State of Maine Office of Technology in Augusta, ME. This role serves as a trusted security advisor supporting Maine’s executive agencies through cybersecurity engagement, risk management, operational planning, and enterprise security initiatives. The position offers an opportunity to work directly with agency leaders, MaineIT teams, and security stakeholders to help protect critical public services while strengthening how cybersecurity is managed across the State of Maine. Reporting to the Agency Information Security Officer Manager, this role provides consultative, strategic, and operational support across agency and MaineIT environments to help strengthen security programs, guide cross-functional efforts, and support statewide security priorities. This position plays a key role in advancing enterprise security planning, coordinating cybersecurity activities across agencies and MaineIT divisions, supporting incident response and operational recovery efforts, and helping align security practices with National Institute of Standards and Technology (NIST) guidance and statewide cybersecurity objectives. The role also supports program planning, stakeholder communication, operational readiness efforts, and continuous improvement initiatives tied to Maine’s Information Security Program. Collaboration with agency leadership, technical teams, operational stakeholders, vendors, and security personnel is essential to identify risks, support security planning initiatives, and help strengthen cybersecurity practices across the State of Maine.

Requirements

• Minimum of 5 to 7 years of experience in a leadership role, information security, relationship management, and cross-functional goal achievement
• Regulatory compliance & policy implementation
• Incident response & threat mitigation
• Experience supporting or applying cybersecurity frameworks, standards, or guidance, including NIST-based security practices.

Nice To Haves

• Understanding of cybersecurity governance concepts, risk management principles, and security planning practices
• Demonstrated success building collaborative relationships across business, technical, and leadership stakeholder groups
• Ability to communicate security risks, priorities, and recommendations to varied audiences
• Background supporting incident coordination, security planning initiatives, or enterprise cybersecurity programs
• Relationship Management: Builds trusted working relationships across agencies, technical teams, and leadership groups supporting statewide cybersecurity efforts.
• Risk Awareness: Able to recognize operational and security concerns, evaluate potential impacts, and support risk-based decision-making.
• Security Framework Familiarity: Understanding of cybersecurity standards, regulatory expectations, and NIST-aligned security practices.
• Consultative Approach: Comfortable advising stakeholders, facilitating discussions, and helping teams navigate security planning and incident-related matters.
• Executive Communication: Able to present technical and security information clearly to both technical and non-technical audiences.
• Prioritization: Capable of balancing competing priorities, managing sensitive situations, and working effectively within dynamic environments.

Responsibilities

• Manage and coordinate cybersecurity program plans, stakeholder engagement, and cross-functional initiatives aligned to agency and statewide priorities.
• Collaborate with agency leadership, technical personnel, business teams, and security stakeholders to support risk management and security planning.
• Assist with incident response support, escalation management, communication planning, and restoration activities supporting continuity of business operations.
• Contribute to the development, implementation, maintenance, and review of security plans, procedures, workflows, and program documentation supporting enterprise cybersecurity operations.
• Review technical and business information to help identify security gaps, process improvements, and opportunities to strengthen cybersecurity coordination efforts.
• Work with agencies, MaineIT divisions, contractors, vendors, and external stakeholders to align security priorities, timelines, deliverables, and organizational objectives.
• Support updates to cybersecurity documentation, processes, security procedures, and program management activities based on lessons learned, business needs, and evolving security priorities.

Benefits

• Generous Telework Opportunities: This position has the opportunity to work 90%-100% remotely.
• Meaningful & Impactful Work: Play a vital role supporting statewide cybersecurity coordination and operational resilience efforts.
• Supportive Team: Join a collaborative, professional environment that invests in your development.
• Work-Life Balance: Flexible scheduling and a healthy balance of professional and personal time.
• Innovative Culture: Be part of a team that values innovation and continuous improvement.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed