Apply on Employer Site

State of Wisconsin · 3 days ago

Chief Information Security Officer – Career Executive

Madison, WI

Full-time

Hybrid

Director/Executive

$85K/yr - $130K/yr

The State of Wisconsin is seeking a Chief Information Security Officer (CISO) for the Department of Workforce Development. The CISO will develop and implement a comprehensive information security program, ensuring the confidentiality, integrity, and availability of the agency's data and technology assets while fostering a risk-aware culture.

AssociationNon Profit

No H1B

U.S. Citizen Only

Responsibilities

Develop and implement a department-wide information security program ensuring confidentiality, integrity, and availability of on-premise and cloud enterprise systems data, and technology assets

Maintain collaboration and coordination within the department, with partner state agencies, local governments, Wisconsin tribes, and educational entities

Lead the agency in developing and maintaining a defensible security program consisting of policies, procedures, standards, and controls that protect agency's data, systems, and resources

Champion a risk-aware culture to help safeguard agency's information by applying people, processes, and technologies to minimize IT security, cybersecurity risk and foster IT security and cybersecurity awareness

Qualification

Information securityCybersecurity operationsIT risk managementSecurity certificationCloud securityISO/IEC 27001NIST 800-53Incident responseVulnerability managementStaying informedBachelor's degreeCommunication skillsDecision-makingRelationship buildingAdaptabilityLeadership experience

Required

Progressive and extensive experience in IT, such as information security, cloud security, IT risk management, or cybersecurity operations

Direct and practical experience working with common information security management frameworks, such as ISO/IEC 27001, and NIST 800-53, and similar regulatory compliance standards

Experience in various cybersecurity domains such as incident response, vulnerability management, regulatory compliance reviews, and creation of security awareness training

Experience communicating cybersecurity and risk-related concepts to technical and nontechnical audiences at various levels, ranging from senior executives to technicians

Ability to adapt to and implement change

Excellent decision-making skills

Building and maintaining relationships with a variety of internal and external stakeholders

Staying abreast and informed of latest cybersecurity threats and trends

Bachelor's degree, preferably in Computer Science, Information Security or a related field

Security/Risk certification such as Certified Information Systems Security Professional (CISSP) or equivalent Information Security certification

Additional Security/Risk certifications such as Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC) or other SANS certifications in Cloud Security and/or Information Security Management areas