Chief Information Security Officer

Washoe County•Reno, NV

3d•Onsite

About The Position

Under administrative direction, responsible for the strategy, governance, and operational management of information and cyber security to protect the confidentiality, integrity, and availability of Washoe County services and data; provides direct oversight for Washoe County’s enterprise-wide information security program; and performs related work as required. This is an Open Competitive/Countywide Promotional recruitment being conducted to fill a current full-time vacancy in the Washoe County Technology Services Department. The list established from this recruitment may be used to fill future vacancies as they occur. Washoe County is implementing an ambitious County Technology Plan to modernize technology, strengthen cybersecurity, improve digital services, and enhance the delivery of public services. As a key member of the leadership team, the Chief Information Security Officer (CISO) will lead the cybersecurity strategy that supports this vision by strengthening cyber resilience, managing enterprise risk, and ensuring the secure delivery of technology services across the organization. This is a unique opportunity to shape the future of cybersecurity for one of Nevada's largest county governments while protecting the systems and information that employees, residents, and partner agencies rely on every day. The CISO serves as the County's principal cybersecurity advisor and is responsible for establishing and maturing the County's enterprise information security program. This leadership role provides strategic direction for cybersecurity governance, risk management, security operations, regulatory compliance, incident response, and security architecture across a diverse and decentralized technology environment. The CISO partners with executive leadership, department directors, and Technology Services to embed cybersecurity into business operations while enabling innovation, operational excellence, and the reliable delivery of County services. Reporting operationally to the Chief Information Officer (CIO) while maintaining direct access to the County Manager on matters of county-wide cyber risk, the CISO provides oversight of the County's cybersecurity program while working collaboratively with Technology Services and departmental leaders to implement secure, resilient, and modern technology solutions. This governance model ensures cybersecurity remains both a strategic business enabler and an enterprise risk management function. The Chief Information Security Officer is a confidential, unclassified position and is therefore not covered by a bargaining unit.

Requirements

Eight years of full-time experience in information security and technology infrastructure
A bachelor’s degree in information security, computer science, information systems, or a closely related field; OR an equivalent combination of training and experience.
A valid driver's license is required at the time of appointment and must be maintained for continued employment in this classification.
Accomplished cybersecurity leader who combines strategic vision with deep technical expertise and thrives in a collaborative public-sector environment.
Equally comfortable briefing executive leadership and elected officials on enterprise cyber risk as they are leading technical teams through complex security incidents.
Trusted advisor who builds strong partnerships across departments, influences without direct authority, and successfully balances cybersecurity with the County's mission of delivering reliable public services.
Collaborative leader, an effective communicator, and a hands-on practitioner who inspires confidence, drives organizational change, and fosters a culture of security throughout the County.
Exceptional leadership, interpersonal, and communication skills and is capable of building trust and influencing outcomes across a diverse and decentralized organization.
Soft skills and emotional intelligence to collaborate effectively with the County Manager, Chief Information Officer, elected officials, department leaders, technical teams, and external partners.
Skilled relationship builder who leads through collaboration, inspires confidence during high-pressure situations, navigates complex organizational dynamics with diplomacy and integrity, and effectively balances cybersecurity with the County's mission of delivering reliable public services.
Deep technical expertise across modern cybersecurity disciplines, including enterprise security architecture, security operations, incident response, cloud and hybrid security, identity and access management, vulnerability management, Zero Trust principles, governance, risk management, compliance, and third-party risk management.
Proven track record of developing and maturing enterprise cybersecurity programs while remaining technically engaged in architecture decisions and major cyber incidents.
Ability to translate complex technical risks into clear, actionable business decisions for executive leadership.
Professional credibility and an ongoing commitment to professional development.

Nice To Haves

Certified Information Systems Security Professional (CISSP)
Certified Information Security Manager (CISM)
Certified in Risk and Information Systems Control (CRISC)
Certified Information Systems Auditor (CISA)
Certified Cloud Security Professional (CCSP)
GIAC Certifications

Responsibilities

Strategy, governance, and operational management of information and cyber security to protect the confidentiality, integrity, and availability of Washoe County services and data.
Direct oversight for Washoe County’s enterprise-wide information security program.
Lead the cybersecurity strategy that supports the County Technology Plan by strengthening cyber resilience, managing enterprise risk, and ensuring the secure delivery of technology services.
Establish and mature the County's enterprise information security program.
Provide strategic direction for cybersecurity governance, risk management, security operations, regulatory compliance, incident response, and security architecture across a diverse and decentralized technology environment.
Partner with executive leadership, department directors, and Technology Services to embed cybersecurity into business operations while enabling innovation, operational excellence, and the reliable delivery of County services.
Provide oversight of the County's cybersecurity program while working collaboratively with Technology Services and departmental leaders to implement secure, resilient, and modern technology solutions.