Business SME-Senior

Novalink Solutions LLC•Augusta, ME

2d•Remote

About The Position

As the Agency Information Security Officer, you’ll serve as a trusted security advisor supporting Maine’s executive agencies through cybersecurity engagement, risk management, operational planning, and enterprise security initiatives. This is an opportunity to work directly with agency leaders, MaineIT teams, and security stakeholders to help protect critical public services while strengthening how cybersecurity is managed across the State of Maine. Reporting Agency Information Security Officer Manager, this role provides consultative, strategic, and operational support across agency and MaineIT environments to help strengthen security programs, guide cross-functional efforts, and support statewide security priorities. This position plays a key role in advancing enterprise security planning, coordinating cybersecurity activities across agencies and MaineIT divisions, supporting incident response and operational recovery efforts, and helping align security practices with National Institute of Standards and Technology (NIST) guidance and statewide cybersecurity objectives. The role also supports program planning, stakeholder communication, operational readiness efforts, and continuous improvement initiatives tied to Maine’s Information Security Program. You’ll collaborate with agency leadership, technical teams, operational stakeholders, vendors, and security personnel to identify risks, support security planning initiatives, and help strengthen cybersecurity practices across the State of Maine.

Requirements

Bachelor’s degree in cybersecurity, information technology, computer science, information systems, or a related field. Equivalent combinations of education, training, certifications, and relevant experience will also be considered.
A minimum of 5 years of professional experience in cybersecurity, information security, risk management, security governance, compliance, security program support, or related disciplines.
Experience supporting or applying cybersecurity frameworks, standards, or guidance, including NIST-based security practices.
5 to 7 years of experience in a leadership role, information security, relationship management, and cross-functional goal achievement
Regulatory compliance & policy implementation
Incident response & threat mitigation

Nice To Haves

Understanding of cybersecurity governance concepts, risk management principles, and security planning practices
Demonstrated success building collaborative relationships across business, technical, and leadership stakeholder groups
Ability to communicate security risks, priorities, and recommendations to varied audiences
Background supporting incident coordination, security planning initiatives, or enterprise cybersecurity programs

Responsibilities

Manage and coordinate cybersecurity program plans, stakeholder engagement, and cross-functional initiatives aligned to agency and statewide priorities.
Collaborate with agency leadership, technical personnel, business teams, and security stakeholders to support risk management and security planning.
Assist with incident response support, escalation management, communication planning, and restoration activities supporting continuity of business operations.
Contribute to the development, implementation, maintenance, and review of security plans, procedures, workflows, and program documentation supporting enterprise cybersecurity operations.
Review technical and business information to help identify security gaps, process improvements, and opportunities to strengthen cybersecurity coordination efforts.
Work with agencies, MaineIT divisions, contractors, vendors, and external stakeholders to align security priorities, timelines, deliverables, and organizational objectives.
Support updates to cybersecurity documentation, processes, security procedures, and program management activities based on lessons learned, business needs, and evolving security priorities.