Information Security Officer - #ARS00964

Virginia Information Technologies Agency•Henrico, Virginia, VA

1d•$146,500•Hybrid

About The Position

Join DARS as the Information Security Officer and lead a mission-focused security program that protects vital information assets across Virginia’s Disability Services Agencies. The Information Security Division provides information security services to functional programs of the Department for Aging and Rehabilitative Services (DARS). In addition, via memorandum of agreement (MOA), The Information Security Division provides information security services to the Disability Services Agencies (DSA), which include the Wilson Workforce and Rehabilitation Center (WWRC), Department for the Blind and Vision Impaired (DBVI), the Virginia Rehabilitation Center for the Blind and Vision Impaired (VRCBVI), the Department for the Deaf and Hard of Hearing (VDDHH), and the Virginia Board for People with Disabilities (VBPD). These information security services are provided in support of the DSA’s strategic goals, objectives and initiatives. We are seeking an Information Security Officer to provide leadership, planning and direction for the DSA information security program by developing strategic approaches, plans, policies and procedures. This will include the delivery of an Information security program for the DSA which results in adequate safeguards for the agency's vital information resources and the supervision of staff who assist and/or carry out relevant information security system functions. Position ensures that Virginia Information security laws and policies are implemented and that emerging Information security technologies and processes are appropriately incorporated. Position consults and advises Agency officials regarding the security of DSA information assets and represents DSA in public Information security forums.

Requirements

Training in Information Systems, Information Security, Information Technology Audits, Computer Science, Cybersecurity, or related field.
Extensive experience in information security and risk management disciplines, including information security trends, technologies, best practices, controls, models, architecture, etc.
Demonstrated executive leadership experience in in managing teams, vendors and contractors.
Extensive working knowledge and understanding of information security practices, policies, applications and network security Issues.
Demonstrated knowledge and skill Information systems review.
Working knowledge of information security requirements and their Implementation in the following areas: IT Operations, Applications, Networks, Risk Management, Continuity Planning, Incident Management/Response and System Architecture.
Demonstrated ability to coordinate and lead business and technical resources in the completion of enhancement, system, contract, and policy initiatives.
Ability to develop and implement security policies, procedures and applications; to implement the proper controls of IT and network systems.
Ability to create spreadsheets, presentations, entering and extracting data from various databases; to identify the business drivers of risk and align security strategies with those drivers; to lead the various components of an Information security program; to effectively communicate both orally and in writing to diverse audiences, various levels of management, and both Internal and external customers; and to supervise others carrying out security system functions.

Nice To Haves

Experience in information security or information systems review.
Experience/knowledge of Information security program requirements for the Commonwealth of Virginia.
Certifications such as CISA, CISM, CRISC, and/or CISSP.