New Job Deputy Chief Information Security Officer In New Hampshire

State of New Hampshire Job Posting

DEPARTMENT OF INFORMATION TECHNOLOGY

CIO OFFICE - Cyber Security Goup

Hazen Dr.

DEPUTY CHIEF INFORMATION SECURITY OFFICER

Assistant Chief Information Security Officer

LG: HH

Position #9U385

*See total compensation information at the bottom of announcement.

The State of New Hampshire, Department of Information Technology, CIO Office - Cyber Security Group has a full time vacancy for a Deputy Chief Information Security Officer/Assistant Chief Information Security Officer.

SCOPE OF WORK : The Assistant Chief Information Security Officer is a senior-level executive responsible for the enterprise vision, strategy and program to ensure the protection of the State of New Hampshire’s information assets including networks, systems and data crucial to state government operations. This position reports to the CISO unless it is covering for the CISO or the CISO becomes unavailable in which case it reports to the DoIT Commissioner and CIO. This position is responsible for the enterprise vision, strategy and program to ensure the protection of the State of New Hampshire’s information assets including networks, systems and data crucial to state government operations.

ACCOUNTABILITIES:

Establish and maintain a strong collaborative team relationship within each State Agency to include, at a minimum, the DoIT Business Relationship Manager for the Agency, the Agency Information Security Officer, and the Agency Information Privacy Officer (where assigned.)

Leverage the relationship with the teams in each Agency to advocate for the Agency Senior Leadership’s support of enterprise-wide security awareness training, implementation of state-wide information and cyber security policy and procedures, and implementation of all elements of the Statewide Cyber Self Insurance Framework within their Agency.

Leverage the relationship with the teams in each Agency to educate Agency Leadership on the Cyber Disruption Plan, to include roles, responsibilities, and accountabilities. Focus the decision-making role of Agency Leaders to create smooth execution of incident response playbooks as they specifically apply to the Agency. Collaborate with Agency Teams on incident response exercises.

Provide security situational awareness notifications; statewide incident response updates; status of agency requests; and recommendations to strengthen statewide security posture to Agency teams.

Provide notification of priority incident response resource requirements; escalate remediation prioritization; provide security assessment of products, solutions, and contracts; provide situational awareness and security updates that impact multi-organizational units.

When designated, lead and oversee the DoIT Security Incident Response Team(s) to complete security tasks and initiatives; direct members engaged in incident response activities; report status of assigned actions and remediation efforts.

Serve as the Primary POC within the Office of the Chief Information Security Officer (CISO) for State Agency Leadership requests for information, actions, and security reviews. Consult with Agency Leads for Agency engagements with external entities that have a cyber or information security component.

Provide information required for various audit efforts as part of the DoIT Team lead by the Compliance Team. As necessary, review vendor security assessments; and coordinate with vendors on findings and recommendations to determine compensatory actions and a “way to yes.”

Serve as Primary Liaison with Department of Safety Information Analysis Center. Enable effective cyber threat and information security information sharing across State Agencies and when assigned, along with the CISO, act in a port/starboard role as the Emergency Support Function (ESF) -17 Lead under the Statewide Emergency Operations Plan for Major Incident Responses.

MINIMUM QUALIFICATIONS:

Education : Bachelor's degree from a recognized college or university. Each additional year of approved formal education may be substituted for one year of required work experience.

Experience : Ten years of experience in information technology or data management, five years of which shall have been in a management capacity. Each additional year of approved work experience may be substituted for one year of required formal education.

License/Certification: Must be eligible to hold a valid New Hampshire driver's license and have access to transportation for use in statewide travel.

SPECIAL REQUIREMENTS : Experience in cybersecurity design, policy and compliance, access control, risk management, and operations, physical and network security.

SPECIAL QUALIFICATIONS : Knowledge of numerous technologies well versed in cybersecurity, ability to balance security with state business requirements and platform supportability, superior communications, organizational, analytical, team building and collaboration skills.

DISCLAIMER STATEMENT : The supplemental job description lists the essential functions of the position and is not intended to include every job duty and responsibility specific to a position. An employee may be required to perform other related duties not listed on the supplemental job description provided that such duties are characteristic of that classification.

For further information please contact Ken Weeks, Chief Information Securify Officer (603) 223-5734

Selected candidate will undergo a fingerprint-based criminal background check and motor vehicle record check in order to ensure suitability for exposure to confidential information.

*TOTAL COMPENSATION INFORMATION

The State of NH total compensation package features an outstanding set of employee benefits, including:

HMO or POS Medical and Prescription Drug Benefits:

The actual value of State-paid health benefits is based on the employee¿s union status, and employee per pay period health benefit contributions will vary depending on the type of plan selected.

Value of State's share of Employee's Retirement: 14.53% of pay

Other Benefits:

o Dental Plan at minimal cost for employees and their families ($500-$1800 value)

o Flexible Spending healthcare and childcare reimbursement accounts

o State defined benefit retirement plan and Deferred Compensation 457(b) plan

o Work/life balance flexible schedules, paid holidays and generous leave plan

o $50,000 state-paid life insurance plus additional low cost group life insurance

o Incentive-based Wellness Program (ability to earn up to $500)

Want the specifics? Explore the Benefits of State Employment on our website:

EOE

TDD Access: Relay NH 1-800-735-2964