Information Security Officer

Lake County•Waukegan, IL

22h•Onsite

About The Position

Lake County Government is seeking an Information Security Officer (ISO) with a track record of implementing security best practices at the enterprise level. This position will be responsible for developing, implementing, and directing a comprehensive information technology security and privacy program. The ISO is responsible for developing and monitoring practices to ensure that Lake County’s information systems are physically secure and available to authorized users and is responsible for executive guidance within IT risk management and the overall security posture of the organization. This position will continually prevent, identify, and mitigate security threats and vulnerabilities in Lake County's systems while assessing the amount of risk present and the cost and value of implementing controls and preventative measures. The ISO is responsible for promoting security awareness in the organization and ensuring compliance with statutory and regulatory requirements regarding information access, security, and privacy.

Requirements

Excellent verbal and written communication skills and the ability to interact professionally with a diverse group of executives, managers, and subject matter experts
8+ years in a technology leadership position with at least 5 years in information security
5+ years of experience leading complex, enterprise-wide security projects
5+ years of experience implementing or administering common information security management frameworks such as ITIL, COBIT or NIST and leading organizations through SOX, HIPAA, PCI or CJIS compliance efforts

Nice To Haves

Bachelor’s degree in technology or closely related discipline desired
One or more of the following certifications preferred: CISSP, CISM, CISA or similar

Responsibilities

Develop, implement, and maintain procedures and practices to ensure a high level of security for Lake County’s information systems and assets.
Develop, maintain and enhance Incident and Response procedures to address security incidences (breaches); respond to alleged violations and/or complaints.
Coordinate the development and delivery of security awareness programs.
Participate in Disaster/Recovery planning and testing.
Conduct and coordinate security audits.
Develop and implement an ongoing risk assessment program targeting information security; recommend methods for vulnerability detection and remediation, and oversee vulnerability and penetration testing to ensure the integrity, confidentiality and availability of information.
Provide and present the latest legislation, regulation, advisories, alerts and vulnerabilities pertaining to Lake County’s security and privacy.
Ensure that security programs are in compliance with relevant laws, regulations and policies to minimize or eliminate risk and audit findings.
Manage regulatory and FOIA requests.
Lead IT strategy planning activities, bringing a current knowledge and future vision of security best practices.
Create, communicate and implement a process for vendor risk management.
Create and manage information security and risk management awareness training programs for all employees, contractors and approved system users.
Work cross-departmentally to facilitate IT risk assessment and risk management processes.
Provide strategic risk guidance for IT projects, including the evaluation and recommendation of technical controls.