IT Security Governance Lead: Central Administration #00599

Virginia Information Technologies Agency•Richmond, VA

12d•Onsite

About The Position

The Information Technology Unit (ITU) provides technology planning and support to the Department to help ensure the successful accomplishment of the Department’s mission. Ensure that a consistent, dependable and high level of technical security is maintained and that the Department Information and IT systems are adequately protected. Assist in developing, implementing and maintaining IT Security policies, standards, guidelines and procedures; identify IT Security goals, objectives and metrics consistent with the Department’s Strategic Plan and the Technology Strategic Plan; assists in providing technical guidance regarding information security matters with knowledge of information security management, security assessments, analysis, security laws, policies, rules and regulations; maintain. Knowledge of all applicable VITA IT Security Standards, Policies and Guidelines. Ensure Security Awareness Training (SAT) activities are aligned and regularly reviewed, revised and tested; Assist Information Security leadership with all internal units and external agencies, departments and vendors; and maintain constituent relationships required to ensure sound IT Security.

Requirements

Assists with the DOC Security Program in the areas of risk management.
Experience with Business Impact Analysis and Business Continuity assessments and updates.
Experience conducting Disaster Recovery Coordination and leading efforts in testing.
Assist in implement security solutions to improve the DOC security posture.
Experience performing Risk Assessments (including systems, third party reviews)
Analyzing, mitigating, and resolving security risks, threats, and vulnerabilities.
Implementing secure solutions to take advantage of new features and functionality available in cloud environments.
Monitor, report and respond to security events.
Assist with implementing cloud security strategies.
Develop and recommend enhancements to technical standards, policies, and practices.
Monitor and conduct quality assurance reviews and assess IT security compliance with policies, procedures and standards.
Assists in developing and deliver security awareness programs and trainings.
Assists with conducting security incident management.
Works with ISO to ensure compliance with results from penetration testing and vulnerability scans.
Research emerging security trends and attack vectors
Participate in an on-call work rotation for incidents.
Conduct internal and external Investigation on our business partners.

Nice To Haves

Additional Education, Experience, Licenses, Certifications that would be beneficial to the Agency for the employee to possess on the first day of work.
Ensure that a consistent, dependable and high level of technical security is maintained and that the Department Information and IT systems are adequately protected.
Assist in developing, implementing and maintaining IT Security policies, standards, guidelines and procedures; identify IT Security goals, objectives and metrics consistent with the Department’s Strategic Plan and the Technology Strategic Plan; assists in providing technical guidance regarding information security matters with knowledge of information security management, security assessments, analysis, security laws, policies, rules and regulations; maintain.
Knowledge of all applicable VITA IT Security Standards, Policies and Guidelines.
Ensure Security Awareness Training (SAT) activities are aligned and regularly reviewed, revised and tested; Assist Information Security leadership with all internal units and external agencies, departments and vendors; and maintain constituent relationships required to ensure sound IT Security.

Responsibilities

Assist with the DOC Security Program in the areas of risk management.
Experience with Business Impact Analysis and Business Continuity assessments and updates.
Experience conducting Disaster Recovery Coordination and leading efforts in testing.
Assist in implement security solutions to improve the DOC security posture.
Experience performing Risk Assessments (including systems, third party reviews)
Analyzing, mitigating, and resolving security risks, threats, and vulnerabilities.
Implementing secure solutions to take advantage of new features and functionality available in cloud environments.
Monitor, report and respond to security events.
Assist with implementing cloud security strategies.
Develop and recommend enhancements to technical standards, policies, and practices.
Monitor and conduct quality assurance reviews and assess IT security compliance with policies, procedures and standards.
Assists in developing and deliver security awareness programs and trainings.
Assists with conducting security incident management.
Works with ISO to ensure compliance with results from penetration testing and vulnerability scans.
Research emerging security trends and attack vectors
Participate in an on-call work rotation for incidents.
Conduct internal and external Investigation on our business partners.