Description
You will lead and execute the overall information security operations program.
Responsibilities
- Create and maintain an agency-wide IT security program aligned with regulations and best practices.
- Lead incident response, covering detection, containment, and mitigation of security threats.
- Develop and enforce security policies and procedures, ensuring compliance with IT directives and agency requirements.
- Assess risks to information systems and data, implementing measures to reduce risk to acceptable levels.
- Oversee continuous monitoring of systems for vulnerabilities and threats.
Required Skills
- Bachelor's degree in a relevant field.
- 10+ years of experience in information security or a related field, including leadership roles.
- Hands-on experience in risk management, incident response, vulnerability assessment, and security architecture.
- Familiarity with NIST standards.
- Experience developing security policies and procedures.
- Experience managing cybersecurity teams or IT security professionals.
- Familiarity with Splunk, Solarwinds, and Azure.
- Knowledge of firewall operation.
- Relevant certifications such as CISSP, CISM, or CISA.