DoIT Chief Information Security Officer (DoIT# 68158)

The Chief Security Officer (CISO) is responsible for establishing the information security policy, standards, processes and procedures in accordance with best security practices, risk management and various regulatory compliance requirements. The CISO will stay abreast of new and emerging security standards, controls, processes and procedures, and modify or incorporate them into DoIT’s security model in response to evolving threats. This position will develop, implement and monitor long-term information security strategy to include approving technology use based on risk and cost benefit analysis. The CISO is responsible for tactical security incident response activities to include, overseeing remediation efforts for security incidents and digital forensics activities, and modifying or developing compensating controls for systems or architecture at high risk of compromise. This position manages work streams and personnel as part of managing DoIT’s overall information security program. The CISO will serve as the lead for the Agency’s security rules compliance at DoIT How does it get done?

• Leading security related risk management activities and investigations as needed utilizing a firm

understanding of Security Compliance protocols, including: Payment Card Industry (PCI), and The National Institute of Standards and Technology (NIST) compliance standards.

• Leading the Agency’s strategy related to information security programs
• Consults with Agency CIOs and CISOs, leading the formation of an integrated, state-wide information security organization
• Recommends and oversees DoIT security planning processes
• Creates and implements long-range security and compliance standards
• Provides leadership all DoIT security incidents, is the point of contact during such incidents
• Provides communication of state security standards for information technology across state agencies and entites

Who are the customers?

Senior leadership at DoIT and liaison with other senior leaders from other State Agencies and entities.

Do you have a valid Driver’s License license?, Do you have experience in Team management?, Senior leadership at DoIT and liaison with other senior leaders from other State Agencies and entities. Minimum Qualification

Bachelor’s Degree in Computer Science, Management Information Systems (MIS), Information Technology, Engineering, or similar technical degree and six (6) years of experience in at least two (2) of the following areas: Applications Development, IT Architecture, Data Management, Network Administration, Project Management, IT Security/Compliance, or Systems Administration. Any combination of education from an accredited college or university in a related field and/or direct experience in this occupation totaling ten (10) years may substitute for the required education and experience. At least two (2) years leading an IT team. Employment Requirements

Must possess and maintain current ID or Driver’s License. Pre-employment background investigation is required, and employment is conditional pending results. Working Conditions

Work is performed in an office setting with exposure to Visual/Video Display Terminal (VDT) and extensive personal computer and phone usage. Some sitting, standing, bending and reaching may be required. Supplemental Information

3.43.4 out of 5 stars 715 Alta Vista St, Santa Fe, NM 87505 $44.98 - $71.96 an hour - Full-time

The New Mexico Department of Information Technology is the enterprise technology partner serving and supporting state agencies with innovative solutions to advance the delivery of their core missions and to create progress for all New Mexicans.

This posting will be used for ongoing recruitment and may close at any time. Applicant lists may be screened more than once. Why does the job exist?