Sr. Business SME - Agency Information Security Officer

• Partner with agency leadership, IT teams, and security stakeholders
• Support cybersecurity risk management and security planning
• Coordinate incident response, escalation, and recovery activities
• Identify security gaps and recommend process improvements
• Support security policies, procedures, and compliance initiatives
• Apply NIST-aligned cybersecurity practices
• Coordinate cross-functional cybersecurity programs and initiatives
• Communicate security risks and recommendations to technical and business stakeholders

5-7+ years of experience in Information Security / Cybersecurity / Risk Management Leadership and cross-functional stakeholder management experience Experience with NIST or cybersecurity frameworks Regulatory compliance and security policy implementation Incident response and threat mitigation experience Strong communication and relationship-management skills Bachelor’s degree in Cybersecurity, IT, Computer Science, Information Systems, or related field (or equivalent experience)

Preferred: State government/public-sector cybersecurity experience, GRC, security governance, risk assessments, and enterprise security program experience.