CHIEF INFORMATION SECURITY OFFICER

Under administrative direction, responsible for the strategy, governance, and operational management of information and cyber security to protect the confidentiality, integrity, and availability of Washoe County services and data; provides direct oversight for Washoe County’s enterprise-wide information security program; and performs related work as required.

This is an Open Competitive/Countywide Promotional recruitment being conducted to fill a current full-time vacancy in the Washoe County Technology Services Department. The list established from this recruitment may be used to fill future vacancies as they occur.

For more information on this position, please see the Job Specification at Job Specifications and Salaries - Washoe County

About the Position Washoe County is implementing an ambitious County Technology Plan to modernize technology, strengthen cybersecurity, improve digital services, and enhance the delivery of public services. As a key member of the leadership team, the Chief Information Security Officer (CISO) will lead the cybersecurity strategy that supports this vision by strengthening cyber resilience, managing enterprise risk, and ensuring the secure delivery of technology services across the organization. This is a unique opportunity to shape the future of cybersecurity for one of Nevada’s largest county governments while protecting the systems and information that employees, residents, and partner agencies rely on every day.

The CISO serves as the County’s principal cybersecurity advisor and is responsible for establishing and maturing the County’s enterprise information security program. This leadership role provides strategic direction for cybersecurity governance, risk management, security operations, regulatory compliance, incident response, and security architecture across a diverse and decentralized technology environment. The CISO partners with executive leadership, department directors, and Technology Services to embed cybersecurity into business operations while enabling innovation, operational excellence, and the reliable delivery of County services.

Reporting operationally to the Chief Information Officer (CIO) while maintaining direct access to the County Manager on matters of county-wide cyber risk, the CISO provides oversight of the County’s cybersecurity program while working collaboratively with Technology Services and departmental leaders to implement secure, resilient, and modern technology solutions. This governance model ensures cybersecurity remains both a strategic business enabler and an enterprise risk management function.

The Chief Information Security Officer is a confidential, unclassified position and is therefore not covered by a bargaining unit., In addition to the application, the following documents must be included with the application before the filing deadline in order to be considered:

• Compelling cover letter
• Comprehensive resume which reflects how the applicant meets the Ideal Candidate criteria
• One letter of recommendation

Eight years of full-time experience in information security and technology infrastructure AND a bachelor’s degree in information security, computer science, information systems, or a closely related field; OR an equivalent combination of training and experience.

License Or Certificate A valid driver’s license is required at the time of appointment and must be maintained for continued employment in this classification.

Ideal Candidate Criteria The ideal candidate is an accomplished cybersecurity leader who combines strategic vision with deep technical expertise and thrives in a collaborative public-sector environment. They are equally comfortable briefing executive leadership and elected officials on enterprise cyber risk as they are leading technical teams through complex security incidents. This individual is a trusted advisor who builds strong partnerships across departments, influences without direct authority, and successfully balances cybersecurity with the County’s mission of delivering reliable public services. They are a collaborative leader, an effective communicator, and a hands-on practitioner who inspires confidence, drives organizational change, and fosters a culture of security throughout the County.

The ideal candidate possesses exceptional leadership, interpersonal, and communication skills and is capable of building trust and influencing outcomes across a diverse and decentralized organization. They possess the soft skills and emotional intelligence to collaborate effectively with the County Manager, Chief Information Officer, elected officials, department leaders, technical teams, and external partners. The ideal candidate is a skilled relationship builder who leads through collaboration, inspires confidence during high-pressure situations, navigates complex organizational dynamics with diplomacy and integrity, and effectively balances cybersecurity with the County’s mission of delivering reliable public services.

The ideal candidate must also demonstrate deep technical expertise across modern cybersecurity disciplines, including enterprise security architecture, security operations, incident response, cloud and hybrid security, identity and access management, vulnerability management, Zero Trust principles, governance, risk management, compliance, and third-party risk management. They should have a proven track record of developing and maturing enterprise cybersecurity programs while remaining technically engaged in architecture decisions and major cyber incidents. The ability to translate complex technical risks into clear, actionable business decisions for executive leadership is essential.

Professional credibility and an ongoing commitment to professional development are key requirements for this position. In addition to the classification requirements, the following certifications are highly desirable:

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified in Risk and Information Systems Control (CRISC)
• Certified Information Systems Auditor (CISA)

• Certified Cloud Security Professional (CCSP)

• GIAC Certifications

Pulled from the full job description

• Health insurance
• Vision insurance
• Health savings account
• Dental insurance
• Life insurance
• Dependent health insurance coverage, Background checks will be conducted on selected applicants through the State of Nevada and the Federal Bureau of Investigation (FBI).

Per the Washoe County Background and Reference Checks Policy, new and rehired employees are required to submit to a fingerprint based background investigation. Effective January 1, 2025, the $39.00 fee associated with this background investigation will be paid by the employee (if applicable) and deducted automatically from the first paycheck. Employment is contingent upon the results of the background check, although a record of conviction will not necessarily bar an applicant from employment.

Washoe County requires its employees to reside in the state of Nevada or neighboring California communities such as Truckee, South Lake Tahoe or Susanville as of their first day of work.

Washoe County hires all new employees at the minimum rate of the salary range and eligible employees may receive an annual merit increase of 5% until they reach the maximum salary for the classification. Upon promotion, current Washoe County employees are placed at the minimum rate of the salary range for the higher classification of the new position OR a promotional calculation, whichever is greater.