Agency Information Security Officer

Knowledge Services•Augusta, ME

2d•Hybrid

About The Position

Knowledge Services is seeking an Agency Information Security Officer for a contract through the end of June 2027 (potential for extension) with the State of Maine Office of Technology in Augusta, ME. This role serves as a trusted security advisor supporting Maine’s executive agencies through cybersecurity engagement, risk management, operational planning, and enterprise security initiatives. It offers an opportunity to work directly with agency leaders, MaineIT teams, and security stakeholders to protect critical public services and strengthen cybersecurity management across the State. Reporting to the Agency Information Security Officer Manager, this position provides consultative, strategic, and operational support to enhance security programs, guide cross-functional efforts, and support statewide security priorities. It plays a key role in advancing enterprise security planning, coordinating cybersecurity activities, supporting incident response and operational recovery, and aligning security practices with NIST guidance and statewide objectives. The role also supports program planning, stakeholder communication, operational readiness, and continuous improvement initiatives for Maine’s Information Security Program. Collaboration with agency leadership, technical teams, operational stakeholders, vendors, and security personnel is essential to identify risks, support security planning, and strengthen cybersecurity practices.

Requirements

Minimum of 5 to 7 years of experience in a leadership role, information security, relationship management, and cross-functional goal achievement
Regulatory compliance & policy implementation
Incident response & threat mitigation
Experience supporting or applying cybersecurity frameworks, standards, or guidance, including NIST-based security practices.

Nice To Haves

Understanding of cybersecurity governance concepts, risk management principles, and security planning practices
Demonstrated success building collaborative relationships across business, technical, and leadership stakeholder groups
Ability to communicate security risks, priorities, and recommendations to varied audiences
Background supporting incident coordination, security planning initiatives, or enterprise cybersecurity programs
Relationship Management: Builds trusted working relationships across agencies, technical teams, and leadership groups supporting statewide cybersecurity efforts.
Risk Awareness: Able to recognize operational and security concerns, evaluate potential impacts, and support risk-based decision-making.
Security Framework Familiarity: Understanding of cybersecurity standards, regulatory expectations, and NIST-aligned security practices.
Consultative Approach: Comfortable advising stakeholders, facilitating discussions, and helping teams navigate security planning and incident-related matters.
Executive Communication: Able to present technical and security information clearly to both technical and non-technical audiences.
Prioritization: Capable of balancing competing priorities, managing sensitive situations, and working effectively within dynamic environments.

Responsibilities

Serve as a trusted security advisor supporting Maine’s executive agencies through cybersecurity engagement, risk management, operational planning, and enterprise security initiatives.
Work directly with agency leaders, MaineIT teams, and security stakeholders to help protect critical public services while strengthening how cybersecurity is managed across the State of Maine.
Provide consultative, strategic, and operational support across agency and MaineIT environments to help strengthen security programs, guide cross-functional efforts, and support statewide security priorities.
Advance enterprise security planning, coordinate cybersecurity activities across agencies and MaineIT divisions, support incident response and operational recovery efforts, and help align security practices with National Institute of Standards and Technology (NIST) guidance and statewide cybersecurity objectives.
Support program planning, stakeholder communication, operational readiness efforts, and continuous improvement initiatives tied to Maine’s Information Security Program.
Collaborate with agency leadership, technical teams, operational stakeholders, vendors, and security personnel to identify risks, support security planning initiatives, and help strengthen cybersecurity practices across the State of Maine.
Lead Security Coordination: Manage and coordinate cybersecurity program plans, stakeholder engagement, and cross-functional initiatives aligned to agency and statewide priorities.
Partner with Agencies: Collaborate with agency leadership, technical personnel, business teams, and security stakeholders to support risk management and security planning.
Coordinate Incident Response Efforts: Assist with incident response support, escalation management, communication planning, and restoration activities supporting continuity of business operations.
Support Security Planning: Contribute to the development, implementation, maintenance, and review of security plans, procedures, workflows, and program documentation supporting enterprise cybersecurity operations.
Evaluate Security Gaps: Review technical and business information to help identify security gaps, process improvements, and opportunities to strengthen cybersecurity coordination efforts.
Advance Cross-Functional Collaboration: Work with agencies, MaineIT divisions, contractors, vendors, and external stakeholders to align security priorities, timelines, deliverables, and organizational objectives.
Contribute to Continuous Improvement Efforts: Support updates to cybersecurity documentation, processes, security procedures, and program management activities based on lessons learned, business needs, and evolving security priorities.