
Chief Information Security Officer
- Tallahassee, FL
- $96,000-111,500 per year
- Permanent
- Full-time
- Lead the Security Program: Take charge of the agency's information security program, ensuring compliance with key regulations like Chapter 60GG-2, CJIS Security Policy, and HIPAA. Protect the agency's information assets and guide executive leadership through important technology decisions.
- Develop Strategies and Manage Risks: Create and maintain a cybersecurity vision and strategy that aligns with the agency's goals. Lead risk management processes, including risk assessments and vulnerability management, and ensure 'security by design' principles are integrated into all major technology projects.
- Oversee Security Operations: Develop and maintain the agency's Incident Response Plan, Disaster Recovery Plan, and Continuity of Operations Plan. Investigate cybersecurity events, coordinate responses, and monitor threat intelligence to stay ahead of potential risks.
- Promote Security Awareness: Design and deliver engaging cybersecurity training programs for the agency. Establish a security champion program to promote awareness and track training effectiveness, ensuring everyone stays up to date on security practices.
- Engage with Stakeholders: Act as the main liaison to state and federal agencies, law enforcement, and cybersecurity partners. Represent the agency in executive meetings and legislative inquiries, develop metrics to track the effectiveness of the security program, and provide regular reports to leadership on performance and improvement opportunities. Integrate ITSM best practices into security operations to ensure consistent and repeatable processes.
- Paid vacation, sick leave, and holidays.
- Comprehensive health insurance and life insurance with accidental death and dismemberment benefits.
- Supplemental Dental, Vision, Life, Disability and Hospitalization insurance.
- Tuition-Free college courses.
- Retirement Plans with the Florida Retirement System:
- Pension Plan (Traditional Retirement Pension Plan)
- Investment Plan (401(K)-Type Retirement Plan)
- Deferred Retirement Option Program (Drop)
- Deferred Compensation
- Recently Retired? Beginning July 1, 2024, there is no longer a reemployment limitation; beginning with the 7th calendar month from the member's distribution date, there are no restrictions on working for an FRS employer. You will not be required to repay any prior distributions, and you may continue receiving distributions from the Investment Plan or Pension Plan without interruption.
- Ten (10) years of security experience, with five (5) of those years in a leadership/management position (A bachelor's degree from an accredited college or university. Postsecondary education may substitute for up to 4 years of the required experience).
- Led or contributed to compliance efforts for CJIS, HIPAA, 60GG-2, or other public-sector security frameworks.
- A bachelor's degree in information technology, Cybersecurity, Computer Science, or other related field from an accredited college or university.
- Security-related certifications.
- Experience with security initiatives or programs you implemented that had a measurable impact.