Information Security Officer

Virginia Information Technologies Agency • Chesterfield, VA

1d • $135,000 - $145,000 • Hybrid

About The Position

The Information Security Officer establishes, leads, and continuously matures VITA's enterprise information security program, covering security policy, risk management, security architecture, incident response, and workforce training. The role encompasses VITA's information systems, applications, and data. Because VITA provides shared technology services to other Commonwealth agencies, the security of its environment directly affects those agencies. The ISO is VITA's principal point of contact on security matters for the Agency Head, external auditors, and oversight bodies, and operates under the direction of the Commonwealth CISO. The position is designated under Section 2.2-2009 of the Code of Virginia and is personally accountable to the Agency Head and Commonwealth CISO for the security posture of the entire agency. It requires sustained availability during active security incidents, including after-hours and weekend response, and operates under continuous compliance and audit scrutiny. The position is based at The Boulders in Richmond, Virginia, and is telework eligible.

Requirements

• Extensive knowledge of IT security architecture and security control implementation.
• Extensive experience in security program management and incident response.
• Extensive experience building, leading, and managing an information security program.
• Extensive experience with enterprise IT systems and security tools.
• Extensive experience interpreting and applying federal and state laws, regulations, and security standards, including NIST SP 800-53 and the Commonwealth's SEC-530 Information Security Standard.
• Extensive experience developing and implementing information security policies and standards.
• Knowledge and experience in strategic planning for information security programs.
• Experience in disaster recovery planning and developing and implementing disaster recovery programs.

Nice To Haves

• Knowledge of and experience with programs and operations within the Commonwealth's shared IT services model.
• Knowledge of budgetary processes and principles.
• CISSP (Certified Information Systems Security Professional) certification.
• Experience with project management and/or change management.

Responsibilities

• Develop, implement, and continuously mature security and data protection solutions that protect the confidentiality, integrity, and availability of VITA's information assets.
• Assess requirements and provide guidance on additional security services, promoting sound security practices agency-wide.
• Develop services, standards, and operating procedures to address information security risk and comply with applicable laws and regulations.
• Lead the agency's information security planning process to establish and maintain a comprehensive information security program in accordance with SEC-530 Section 2.5.
• Serve as the agency's principal point of contact on security matters for the Agency Head, external auditors, and oversight bodies.
• Respond to active security incidents, including after-hours and weekend threats and breaches.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed