Information and Security Officer

Virginia Information Technologies Agency • Henrico, Virginia, VA

21h • $116,078 - $133,489 • Onsite

About The Position

The Information and Security Officer leads the Virginia Cannabis Control Authority cybersecurity program in support of program and administrative information systems and technology. This role involves developing and maintaining cybersecurity policies and standards, implementing risk management frameworks, and ensuring compliance with relevant regulations. The officer will oversee the information security training program, manage IT security operations, and lead incident response efforts. Additionally, the role requires maintaining positive customer service and ensuring a safe and healthy workplace.

Requirements

• Possesses working knowledge of all areas within the IT department including information security, systems, network infrastructure, identity management, application development, and endpoint security.
• Significant knowledge and awareness of security trends, legislation, and policy.
• Comprehensive knowledge of current information security threats, weaknesses and vulnerabilities and good working knowledge of zero-day exploits.
• Ability produce and manage IT security corrective action plans.
• Demonstrated ability to model professional integrity and behavior.
• Excellent organization and planning skills.
• Superior communication skills, including the ability to write complex technical documentation for varied audiences
• Master’s Degree or a Bachelor’s Degree, or equivalent combination of education and professional experience.
• Experience building and maintaining information security programs.
• In-depth experience participating in incident response planning and security breach investigations.
• Demonstrated experience delivering security awareness and training programs.
• Experience evaluating, administering and executing enterprise security programs

Nice To Haves

• Experience leading, supervising, and facilitating state government technical security teams.
• Familiarity with continuity of operations, business impact analysis, disaster recovery, and risk management frameworks.
• Experience serving as incident commander during information security incidents.

Responsibilities

• Leads the Virginia Cannabis Control Authority cybersecurity program in support of program and administrative information systems and technology.
• Develops and maintains cybersecurity policies and standards for Authority information technology infrastructure and data.
• Implements and maintains one or more risk management frameworks in order to protect all information technology infrastructure and assets from external and internal threats.
• Ensures CCA cybersecurity compliance and serves as a key point of contact with Authority affiliated audit and compliance personnel.
• Maintains and reviews commercial and governmental IT policies, standards and guidelines, ensuring the Authority follows established best practices.
• Oversees the information security training program for Authority employees and manages ongoing security awareness and role-based security training.
• Manages IT security operations, overseeing cybersecurity monitoring, detection, and management platforms.
• Identifies risks and vulnerabilities, engaging with stakeholders in security responses.
• Participates in the Authority Change Management process and evaluates changes for security risks.
• Assists in the development of a comprehensive continuity of operations and disaster recovery plans.
• Manages crisis situations, which may involve complex information security issues and leads events through completion including overseeing and reporting all forensic activity.
• Develop and maintain very positive and professional customer service and/or relations within the Authority and with all constituencies to include citizens, patients, practitioners, licensees, and contractors.
• Demonstrates a positive and professional attitude and treats everyone with dignity and respect.
• Safety issues are reviewed and communicated to ensure a safe and healthy workplace and a reduction in work-related absence.
• Follow workplace safety regulations and adhere to applicable standards, processes, and programs established for your position.
• Report unsafe work conditions to your supervisor.
• Immediately report work-related incidents to your supervisor and participate in accident investigation requests.

Benefits

• Reasonable accommodations are available to individuals with disabilities during the application and/or interview processes per the Americans with Disabilities Act.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior