Information Security Officer :: Remote

Information Security Officer

Location: Remote

Duration: 12+ months

As the Agency Information Security Officer, you ll serve as a trusted security advisor supporting executive agencies through cybersecurity engagement, risk management, operational planning, and enterprise security initiatives. This is an opportunity to work directly with agency leaders, teams, and security stakeholders to help protect critical public services while strengthening how cybersecurity is managed.

This position plays a key role in advancing enterprise security planning, coordinating cybersecurity activities across agencies and divisions, supporting incident response and operational recovery efforts, and helping align security practices with National Institute of Standards and Technology (NIST) guidance and statewide cybersecurity objectives. The role also supports program planning, stakeholder communication, operational readiness efforts, and continuous improvement initiatives tied to Maine s Information Security Program.

You ll collaborate with agency leadership, technical teams, operational stakeholders, vendors, and security personnel to identify risks, support security planning initiatives, and help strengthen cybersecurity practices across the State of Maine.

Responsibilities

• Lead Security Coordination: Manage and coordinate cybersecurity program plans, stakeholder engagement, and cross-functional initiatives aligned to agency and statewide priorities.
• Partner with Agencies: Collaborate with agency leadership, technical personnel, business teams, and security stakeholders to support risk management and security planning.
• Coordinate Incident Response Efforts: Assist with incident response support, escalation management, communication planning, and restoration activities supporting continuity of business operations.
• Support Security Planning: Contribute to the development, implementation, maintenance, and review of security plans, procedures, workflows, and program documentation supporting enterprise cybersecurity operations.
• Evaluate Security Gaps: Review technical and business information to help identify security gaps, process improvements, and opportunities to strengthen cybersecurity coordination efforts.
• Advance Cross-Functional Collaboration: Work with agencies, divisions, contractors, vendors, and external stakeholders to align security priorities, timelines, deliverables, and organizational objectives.
• Contribute to Continuous Improvement Efforts: Support updates to cybersecurity documentation, processes, security procedures, and program management activities based on lessons learned, business needs, and evolving security priorities.

Skills Needed

• 5 to 7 years of experience in a leadership role, information security, relationship management, and cross-functional goal achievement
• Regulatory compliance & policy implementation
• Incident response & threat mitigation
• Bachelor s degree in cybersecurity, information technology, computer science, information systems, or a related field. Equivalent combinations of education, training, certifications, and relevant experience will also be considered.
• A minimum of 5 years of professional experience in cybersecurity, information security, risk management, security governance, compliance, security program support, or related disciplines.
• Experience supporting or applying cybersecurity frameworks, standards, or guidance, including NIST-based security practices.
• Understanding of cybersecurity governance concepts, risk management principles, and security planning practices
• Demonstrated success building collaborative relationships across business, technical, and leadership stakeholder groups
• Ability to communicate security risks, priorities, and recommendations to varied audiences
• Background supporting incident coordination, security planning initiatives, or enterprise cybersecurity programs
• Relationship Management: Builds trusted working relationships across agencies, technical teams, and leadership groups supporting statewide cybersecurity efforts.
• Risk Awareness: Able to recognize operational and security concerns, evaluate potential impacts, and support risk-based decision-making.
• Security Framework Familiarity: Understanding of cybersecurity standards, regulatory expectations, and NIST-aligned security practices.
• Consultative Approach: Comfortable advising stakeholders, facilitating discussions, and helping teams navigate security planning and incident-related matters.
• Executive Communication: Able to present technical and security information clearly to both technical and non-technical audiences.
• Prioritization: Capable of balancing competing priorities, managing sensitive situations, and working effectively within dynamic environments.