Unclassified - Olympia, WA
posted 3 months ago
The Deputy Chief Information Security Officer (CISO) will play a pivotal role in managing the day-to-day tactical personnel and technical resources for the Washington Department of Fish and Wildlife (WDFW). This position is responsible for overseeing the Security Architecture that supports various critical functions including threat detection, incident response, security baseline management, vulnerability identification, patch management, and conducting risk assessments for Agency IT assets. The Deputy CISO will have the opportunity to identify, engineer, plan, and deploy security solutions through the design, implementation, operation, and maintenance phases of IT systems. Collaboration and teamwork are essential, as the Deputy CISO will work closely with all IT staff to enhance the security of the existing information technology infrastructure and services. In this role, the Deputy CISO will manage the Cybersecurity Operations Team, ensuring that personnel priorities and projects align with strategic agency goals. This includes the review and approval of cost-effective cybersecurity solutions, both commercial off-the-shelf and in-house developed. The Deputy CISO will lead the Cybersecurity team in developing, deploying, testing, and creating business processes for agency-level security initiatives that span multiple IT units and may impact agency-wide operations. Close coordination with agency business partners is crucial to minimize operational impacts during the deployment of emerging security technical controls, utilizing industry-standard risk management frameworks and expert knowledge of operational impacts. The Deputy CISO will also define architectural standards for Cybersecurity Engineer activities, providing expert analysis and mentorship to subordinate personnel. This includes making technical and architectural decisions related to Cybersecurity Operations, completing Washington State Office of Cybersecurity (OCS) Design Review documentation, and analyzing vulnerability assessment reports to determine agency risk. As the tactical leader for the Cybersecurity Incident Response Team, the Deputy CISO will provide input on incident classification and lead incident response actions, ensuring effective recovery and continuous improvement through after-action reviews. Additionally, oversight for Disaster Recovery and Continuity of Operations (DR/COOP) will be part of the responsibilities.