Deputy Chief Information Security Officer - IT Security-Manager - Permanent - *00850-24

Norstella Group - Olympia, WA

Full-time - Manager

Olympia, WA

About the position

The Deputy Chief Information Security Officer (CISO) is responsible for managing the day-to-day operations of the Cybersecurity team at the Washington Department of Fish and Wildlife (WDFW). This role involves overseeing security architecture, incident response, and vulnerability management to ensure the protection of agency IT assets. The position requires collaboration with IT staff to enhance the security of existing infrastructure and services, while also providing application security and system management support.

Responsibilities

• Manage the Cybersecurity personnel priorities and projects to meet strategic agency goals.
• Review and approve commercial off-the-shelf cybersecurity solutions and provide technical oversight for in-house developed solutions.
• Lead the Cybersecurity team in developing, deploying, testing, and business process development of agency-level security initiatives.
• Define architectural standards for Cybersecurity Engineer activities and provide mentorship to subordinate personnel.
• Complete Washington State Office of Cybersecurity Design Review documentation and analyze vulnerability assessment reports.
• Act as the tactical leader for the Cybersecurity Incident Response Team, providing input on incident classification and response actions.
• Participate in after-action reviews for incidents and use findings for continuous improvement.
• Provide Cybersecurity oversight for Disaster Recovery and Continuity of Operations.

Requirements

• Bachelor of Science in Information Technology or equivalent experience (four years of IT experience).
• Four or more years of recent experience in a medium to large organization providing cybersecurity-related technical support.
• Six or more years of recent experience with cybersecurity risk assessment methodologies (NIST, HITECH, RMF).
• Six or more years of recent IT experience including vulnerability scanning, risk assessments, and incident response.

Nice-to-haves

• Experience working in cloud-based environments such as AWS and Azure.
• Experience operating and analyzing logging and monitoring systems, antivirus solutions, and security configurations.
• Certification(s) in CISSP, Network Certification(s), and Server Certification(s).

Benefits

• Medical/Dental/Vision for employee & dependent(s)
• Public Employees Retirement System (PERS)
• Vacation, Sick, and other Leave
• 11 Paid Holidays per year
• Public Service Loan Forgiveness
• Tuition Waiver
• Long Term Disability & Life Insurance
• Deferred Compensation Programs
• Dependent Care Assistance Program (DCAP)
• Flexible Spending Arrangement (FSA)
• Employee Assistance Program
• Commute Trip Reduction Incentives