Information Security Officer

Allied Consultants, Inc.•Austin, TX

About The Position

Allied Consultants, Inc. is seeking an experienced Information Security Officer to provide senior-level leadership and strategic direction for a state agency’s information security, risk management, governance, and compliance programs. The role develops, implements, and oversees enterprise-wide security policies, standards, controls, risk assessments, and security strategies. It ensures compliance with applicable state and federal laws, regulations, and industry standards while protecting the confidentiality, integrity, and availability of agency information assets. The Information Security Officer serves as the agency’s principal information security advisor, collaborating with agency leadership, courts, business units, and technology teams to manage risk and support organizational objectives. The position works under minimal supervision, with extensive latitude for initiative, independent judgment, and decision-making.

Requirements

At least 7 years of experience working in a fast-paced environment with changing priorities.
At least 6 years of experience in information security, cybersecurity, or information technology.
At least 4 years of experience developing, implementing, or administering information security policies, standards, controls, risk management, or compliance programs.
At least 4 years of experience leading security initiatives, projects, or cross-functional teams and presenting recommendations to management.
At least 4 years of experience conducting security risk assessments, audits, compliance reviews, and remediation activities.
At least 4 years of experience with security frameworks such as NIST and CIS Controls, and governance compliance requirements such as Texas Administrative Code 202, DIR and Cyber Command Security requirements, TX-RAMP, FedRAMP, and SOC2.

Nice To Haves

At least 5 years of experience working with state government agencies.
At least 3 years of experience coordinating or using vendor-provided support.
At least 3 years of experience serving as an Information Security Officer or in an equivalent security leadership role.
At least 2 years of experience presenting cybersecurity, risk, or compliance matters to executive leadership and other stakeholders.
At least 2 years of experience with business continuity, disaster recovery, third-party risk management, and cloud environments, including Microsoft Azure, Microsoft 365, and Entra ID.

Responsibilities

Provide leadership and strategic direction for the agency’s information security, risk management, governance, and compliance programs.
Develop, implement, and oversee enterprise-wide security policies, standards, controls, risk assessments, and security strategies.
Ensure compliance with applicable state and federal laws, regulations, and industry standards.
Protect the confidentiality, integrity, and availability of agency information assets.
Serve as the agency’s principal information security advisor.
Collaborate with agency leadership, courts, business units, and technology teams to manage risk and support organizational objectives.
Lead security initiatives, projects, or cross-functional teams and present recommendations to management.
Conduct security risk assessments, audits, compliance reviews, and remediation activities.