SENIOR INFORMATION SECURITY MANAGER

Arizona Department of Administration • Phoenix, AZ

6d • $137,000 • Hybrid

About The Position

The Arizona Department of Revenue’s Chief Information Security Officer (CISO) is a visionary role that leads our Information Security organization. This position serves to protect confidentiality, integrity, and availability of ADOR information and information systems by ensuring appropriate security controls, policies, standards, and procedures are in place and effectively implemented. The CISO plans, reports, and implements all ADOR and statewide security efforts through the continuous review of industry best practices as well as the statewide regulatory and security requirements. The ADOR CISO is not a traditional "Department of No" security leader. The ADOR CISO is an enabler, a partner, and most importantly, a builder. As our CISO, they protect the highly sensitive financial and tax data of Arizona’s citizens while actively removing friction for our Business and IT teams. They champion a culture where security accelerates agility, innovation, and continuous improvement. The CISO has an engineering mindset, a passion for DevSecOps, and believes that the best way to secure an organization is to automate compliance and partner seamlessly with engineers.

Requirements

• Proven, hands-on experience in security engineering, cloud architecture, or software development. You don't just read policy; you understand the underlying code and infrastructure.
• A strong understanding of the compliance frameworks relevant to government and financial data (NIST 800-53, IRS Pub 1075, CIS Controls), with a track record of meeting these standards through modern, automated means.
• You are collaborative, open-minded, and driven by a desire to say "yes" to innovation. You view developer friction as a bug, not a feature of security.
• Deep familiarity with modern software development lifecycles, Agile methodologies, CI/CD tools, and security automation technologies.
• Demonstrated success in leading, coaching, and growing high-performing technology or security teams.
• Valid Class-appropriate driver’s license.
• Successfully pass background and reference checks.
• Arizona Tax Filing Records Check.
• State and Federal Criminal Background Check, including fingerprinting.
• Successfully complete the Electronic Employment Eligibility Verification Program (E-Verify).

Nice To Haves

• Bachelor's degree plus 8 or more years of related experience plus 3 or more years of management experience (or equivalent experience)
• Experience with Continuous Improvement or LEAN is preferred.

Responsibilities

• Be the "Department of How": Shift the security paradigm from acting as a gatekeeper to serving as a trusted advisor and partner. When the business wants to move fast and experiment, your default response is, "Here is how we can do that safely and effectively."
• Empower the Team: Mentor and elevate existing Infosec talent, fostering a modern security mindset that values collaboration, empathy, and continuous learning. Develop a framework to drive agility in your team to reskill and adapt to the fast pace of change in business, technology, and regulation.
• Bridge the Gap: Communicate complex security and risk concepts in clear, business-friendly terms to executive leadership, technical teams, and non-technical stakeholders alike.
• Lead with an Engineering Mindset: Treat infrastructure and security as code. Drive the adoption of automation to eliminate manual security reviews and bottlenecks.
• Shift Left: Deeply integrate security into our CI/CD pipelines. Ensure that vulnerability scanning, compliance checks, and secure coding practices are automated and seamlessly woven into the developer experience.
• Modernize Defense: Architect and oversee cloud-native security controls, zero-trust architectures, and automated incident response playbooks.
• Secure the Mission: Safeguard Arizona taxpayer data and ensure rigorous compliance with critical frameworks (e.g., IRS Publication 1075, NIST, State of Arizona enterprise security policies).
• Automate Compliance: Move away from spreadsheet-based compliance and manual controls and processes. Champion "Compliance-as-Code" to ensure continuous audit readiness without slowing down product delivery.
• Pragmatic Risk-Taking: Help the organization make informed, risk-based decisions that balance the need for absolute data protection with the need for technological experimentation and modernization.

Benefits

• Affordable medical, dental, life, and short-term disability insurance plans
• Participation in the Arizona State Retirement System (ASRS) and long-term disability plans
• 10 paid holidays per year
• Vacation time accrued at 4.00 hours bi-weekly for the first 3 years
• Sick time accrued at 3.70 hours bi-weekly
• Paid Parental Leave-Up to 12 weeks per year paid leave for newborn or newly-placed foster/adopted child (pilot program).
• Deferred compensation plan
• Wellness plans
• Tuition Reimbursement
• Infant at Work Program
• Rideshare and Public Transit Subsidy
• Career Advancement & Employee Development Opportunities
• Flexible schedules to create a work/life balance

What This Job Offers

• Job Type: Full-time
• Career Level: Senior