Information Security Officer

DHRM • Chesterfield, VA

12h • Hybrid

About The Position

The Information Security Officer (ISO) establishes, leads, and continuously matures VITA’s enterprise information security program, including security policy, risk management, security architecture, incident response, and workforce training. The role covers VITA’s information systems, applications, and data; because VITA provides shared technology services to other Commonwealth agencies, the security of VITA’s environment also affects the agencies that rely on those services.

The ISO is designated under Section 2.2-2009 of the Code of Virginia and is personally accountable to the Agency Head and the Commonwealth CISO for the security posture of the entire agency. The position operates within VITA under the direction of the Commonwealth CISO and serves as the agency’s principal security contact for the Agency Head, external auditors, and oversight bodies. This is a high-visibility, high-accountability position subject to continuous compliance and audit scrutiny, with sustained availability required during active security incidents, including after-hours and weekend response. The role involves direct exposure to executive leadership and accountability for outcomes affecting the confidentiality, integrity, and availability of VITA’s information systems.

The position is based at The Boulders in Richmond, Virginia, and is telework eligible. The agency describes its environment as collaborative, customer-focused, and oriented toward growth, accountability, and forward thinking.

Requirements

• Extensive knowledge of IT security architecture and security control implementation.
• Extensive experience in security program management and incident response.
• Extensive experience building, leading, and managing an information security program.
• Extensive experience with enterprise IT systems and security tools.
• Extensive experience interpreting and applying federal and state laws, regulations, and security standards, including NIST SP 800-53 and the Commonwealth’s SEC-530 Information Security Standard.
• Extensive experience developing and implementing information security policies and standards.
• Knowledge and experience in strategic planning for information security programs.
• Experience in disaster recovery planning and developing and implementing disaster recovery programs.
• Consent to a fingerprint background check.
• Must be a U.S. citizen or national, a lawful permanent resident, or an alien authorized to work in the United States; sponsorship is not provided.

Nice To Haves

• Knowledge of and experience with programs and operations within the Commonwealth’s shared IT services model.
• Knowledge of budgetary processes and principles.
• Professional CISSP (Certified Information Systems Security Professional) certification.
• Experience with project management and/or change management.
• Veterans and Virginia National Guard members may receive hiring preference; AmeriCorps, Peace Corps, and other national service alumni are encouraged to apply.

Responsibilities

• Develop, implement, and continuously mature security and data protection solutions that protect the confidentiality, integrity, and availability of VITA’s information assets.
• Assess requirements and provide guidance on additional security services, promoting sound security practices agency-wide.
• Develop services, standards, and operating procedures to address information security risk and comply with applicable laws and regulations.
• Lead the agency’s information security planning process to establish and maintain a comprehensive information security program in accordance with SEC-530 Section 2.5.
• Respond to active security incidents, including after-hours and weekend threats and breaches.
• Serve as the agency’s principal point of contact on security matters for the Agency Head, external auditors, and oversight bodies.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed