IT Deputy Director - Information Security

$104,472 - $161,410/Yr

Tulare County - Visalia, CA

Full-time - Senior

Visalia, CA

Social Assistance

About the position

The IT Deputy Director - Information Security is responsible for leading the information security program for Tulare County. This role involves managing the design, development, implementation, operation, and maintenance of the County's enterprise information security initiatives. The incumbent will identify and evaluate risks to information assets while supporting the County's business objectives. The position requires collaboration with various departments to ensure compliance with legal and regulatory requirements and to enhance the overall security posture of the organization.

Responsibilities

• Manage the design, development, implementation, operation, and maintenance of the County's enterprise information security program.
• Facilitate an information security governance structure and create necessary internal networks among various teams.
• Develop and enhance an up-to-date information security management framework based on recognized standards.
• Lead the information security function across the County to ensure consistent and high-quality management.
• Supervise assigned personnel, including hiring, training, and performance evaluation.
• Develop an information security vision and strategy aligned with organizational priorities.
• Manage the budget for the information security function and report discrepancies.
• Partner with fiscal staff to seek and manage relevant cybersecurity grants.
• Ensure completion of the National Cybersecurity Review (NCSR).
• Liaise with the enterprise architecture team to align security and enterprise architectures.
• Provide regular reporting on the status of the information security program to stakeholders.
• Develop, implement, and monitor a comprehensive information security program.
• Collaborate with departments to ensure compliance with eDiscovery activities and systems.
• Develop and implement security policies and coordinate their approval.
• Facilitate information security risk assessment and management processes.
• Develop metrics and reporting frameworks to measure the effectiveness of the security program.
• Work with compliance staff to ensure data is processed in accordance with applicable laws.
• Manage and contain information security incidents to protect County assets.
• Develop disaster recovery policies and standards aligned with business continuity goals.
• Create an information security awareness training program for all employees and contractors.
• Coordinate the development of incident response plans and procedures.

Requirements

• Bachelor's degree in public administration, Business Administration, Computer Science, or a closely related field.
• Four years of experience in a senior leadership role involving administrative management of technology, risk management, and/or information security.
• Knowledge of relevant legal and regulatory requirements such as HIPAA, PCI standards, and SOX.
• Familiarity with information security management frameworks like ISO/IEC 27001 and NIST.
• Understanding of advanced principles and best practices of system security design and evaluation.

Nice-to-haves

• Master's degree in Public Administration, Business Administration, Computer Science, or a closely related field.
• Certifications such as CISSP, CISM, CISA, or CRISC.

Benefits

• AD&D insurance
• Dental insurance
• Dependent health insurance coverage
• Disability insurance
• Health insurance
• Life insurance
• Loan forgiveness