Information Security Officer

• Develop, implement, and maintain procedures and practices to ensure a high level of security for Lake County’s information systems and assets.
• Develop, maintain and enhance Incident and Response procedures to address security incidences (breaches); respond to alleged violations and/or complaints.
• Coordinate the development and delivery of security awareness programs.
• Participate in Disaster/Recovery planning and testing.
• Conduct and coordinate security audits.
• Develop and implement an ongoing risk assessment program targeting information security; recommend methods for vulnerability detection and remediation, and oversee vulnerability and penetration testing to ensure the integrity, confidentiality and availability of information.
• Provide and present the latest legislation, regulation, advisories, alerts and vulnerabilities pertaining to Lake County’s security and privacy.
• Ensure that security programs are in compliance with relevant laws, regulations and policies to minimize or eliminate risk and audit findings.
• Manage regulatory and FOIA requests.
• Lead IT strategy planning activities, bringing a current knowledge and future vision of security best practices.
• Create, communicate and implement a process for vendor risk management.
• Create and manage information security and risk management awareness training programs for all employees, contractors and approved system users.
• Work cross-departmentally to facilitate IT risk assessment and risk management processes.
• Provide strategic risk guidance for IT projects, including the evaluation and recommendation of technical controls.

• Excellent verbal and written communication skills and the ability to interact professionally with a diverse group of executives, managers, and subject matter experts
• 8+ years in a technology leadership position with at least 5 years in information security
• 5+ years of experience leading complex, enterprise-wide security projects
• 5+ years of experience implementing or administering common information security management frameworks such as ITIL, COBIT or NIST and leading organizations through SOX, HIPAA, PCI or CJIS compliance efforts

Education and/or Other Requirements:

• Bachelor’s degree in technology or closely related discipline desired
• One or more of the following certifications preferred: CISSP, CISM, CISA or similar

Physical Requirements:

• Requires mainly office work, involving standing or walking some of the time, exerting up to 10 pounds of force on a regular basis, and high dexterity in operating office equipment, including a keyboard, phone, copier, etc.
• The position requires normal visual acuity and field of vision and the ability to hear and speak to understand, respond to and build relationships with a diverse clientele.

Lake County offers a competitive salary and benefit package. We also offer flexible working hours, and a comprehensive wellness and training program. Visit our Prospective Employee page to get additional information on why you should work for Lake County!

Are you looking for a challenging role within an organization that provides rewarding compensation, an excellent benefit package and career growth opportunities? If so, Lake County Government is the place for you. Comprised of nearly 3,000 employees, it is our goal to positively serve the residents of Lake County while working with a purpose. We believe our employees should take pride in the work they accomplish while truly respecting a collaborative work environment.