Overview
Skills
Job Details
Job Description:
***Crop to Crop resumes are accepted
Work Location: Hybrid - Majority remote with an on-site requirement of every other Tuesday. The selected individual will be required to come on-site to obtain their equipment and have a tour of the facility upon their start. There may be a few occasions when an extra on-site day may be needed (example: on-site audits).
The role of the Agency Information Security Officer is to provide consultative, professional advice and expertise about security issues to agency and executive management; is the agency subject matter expert on information security matters. The position will work with agencies and MaineIT divisions to identify, assess, prevent, protect, and mitigate information security risks, threats, and vulnerabilities to safeguard business operations. This individual will serve as a central point of contact on security related matters for agencies to assist in their strategic planning, operational needs, incident response operations, and regulatory compliance efforts.
QUALIFICATIONS:
- Self-motivated leader with 5 to 7 years of experience in a leadership role, information security, relationship management, and cross-functional goal achievement;
- Bachelor s degree in information technology or related field. Four years of direct experience with information security consultancy may be used in lieu of a degree;
- Expertise working with Security and Privacy Controls for Information Systems and Organizations as established by the National Institute of Standards and Technology;
- Ability to pass required background checks; and
- While not mandatory, experience with support functions such as consolidated data centers, shared print facilities, and disaster recovery sites as they relate to the regulatory compliance requirements for federally protected data types is preferred.
Required Skills:
- 5 to 7 years of experience in a leadership role, information security, relationship management, and cross-functional goal achievement
- Ability to articulate complex technical information to executive management and high-level government officials.
- Regulatory compliance & policy implementation
- Incident response & threat mitigation