Virginia Office of the Attorney General ยท 3 hours ago
Information Security Officer
The Virginia Office of the Attorney General is seeking an Information Security Officer to lead the development and implementation of information security policies for the Commonwealth. The role involves overseeing security risk assessments, managing the information security budget, and ensuring compliance with relevant standards while providing guidance to IT projects across state agencies.
Law Practice
Responsibilities
Lead the development and implementation of information security policies, standards, and procedures for the Commonwealth
Oversee security risk assessments, vulnerability management, and incident response activities
Develop and manage the information security budget and resource allocation
Coordinate with agency leadership to align security initiatives with organizational objectives
Ensure compliance with relevant standards including NIST, FISMA, and VA-specific security requirements
Provide security guidance and expertise to IT projects across state agencies
Lead security awareness training programs for state employees
Collaborate with federal, state, and local partners on cybersecurity initiatives
Manage security operations including monitoring, detection, and response
Report security metrics and program status to executive leadership
Qualification
Required
Minimum 7 years of experience in information security, with at least 3 years in a leadership role
Thorough knowledge of cybersecurity frameworks, standards, and best practices
Experience implementing and managing enterprise security solutions
Demonstrated ability to communicate complex security concepts to technical and non-technical audiences
Knowledge of federal and state regulations related to information security
Experience with security incident response and management
Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field