Division Director Security, Risk, and Compliance

• Collaborate with the ITi leadership team to develop and implement security, risk, and compliance strategies.
• Ensure comprehensive information security practices are in place, including threat detection, incident response, and vulnerability management.
• Develop and implement risk management programs to identify, assess, and mitigate risks.
• Ensure compliance with relevant regulations, standards, and best practices.
• Monitor and analyze security metrics and performance indicators, providing regular reports to the Director and other stakeholders.
• Coordinate with other departments to ensure security and compliance requirements are integrated into all IT projects and initiatives.
• Oversee the development and maintenance of security policies, standards, and procedures.
• Foster a culture of security awareness and compliance across the organization.

• Initiates, facilitates, and promotes activities to create information security awareness throughout organization

• Provide oversight and ownership for intrusion detection and response
• Coordination of security assessments and penetration testing

• Designing cost effective security architectures that support county business objectives, and comply with all applicable policies, laws, and regulations Monitor multiple external sources of threat and vulnerability information and communicate risks to key personnel.
• Attends conferences and training as required to maintain proficiency
• Evaluate and maintain the information security budget
• Perform other related duties and responsibilities as required

• Provide direct supervision of staff

• Demonstrated ability to lead and manage diverse security, risk, and compliance functions.
• Strong decision-making skills and a proactive approach to problem-solving.
• Ability to coordinate and manage multiple projects in a fast-paced and changing technical environment.
• Excellent customer service skills, with the ability to communicate effectively with both technical and non-technical users.
• Strong written and verbal communication skills.

• Proficiency in relevant technologies and tools, including security information and event management (SIEM) systems, and risk management tools.

• Ability to work independently and within established guidelines, with excellent attention to detail.
• Ability to inspire and motivate team members, fostering a collaborative and productive work environment.

• Computer skills: Proficient with Microsoft Windows and Linux operating systems
• Strong technical background and understanding of enterprise networking and datacenter environments
• Up-to-date knowledge of security threats and exploitation techniques
• Experience conducting technical security assessments and penetration testing using open source and commercial tools
• Experience with scripting and programming languages a plus (Python, PowerShell, BASH, .NET).

• A Bachelor's Degree from an accredited college in Computer Science, Information Systems, or closely related field.

• Minimum of five (5) years of progressively responsible experience in security, risk and compliance
• Minimum of four (4) years of leadership experience, including supervision of individual contributors, with evidence of making impactful change.
• Strong knowledge of compliance frameworks including HIPAA Security Rule, PCI compliance, IRS 1075, and CJIS

• Possession of or the ability to obtain a valid Colorado Driver's License is required
• ITIL Foundation Certification is desired
• Possession of one of more of the following security certifications is preferred: SSCP, CISM, CISA, HISP, CISSP and/or NIST Cybersecurity Framework Practitioner

• Must be able to work outside of regular business hours to respond to system outages

• AFLAC Supplemental Medical Insurance
• Basic Term Life & Optional Term Life Insurance
• Deferred Compensation Plan
• Dental/Vision/Medical Plans
• Generous Vacation/Sick leave
• Long-Term Disability
• Retirement Plan
• Short-Term Disability

• Employee Assistance Program
• Employee Fitness Center
• Employee Health Clinics
• Flexible Work Schedules
• Recreation Center Discounts
• Training & Tuition Reimbursement Programs
• Wellness programs
• Lactation friendly certified workplace

Adams County