Division Director - Information & Cyber Security

Job Overview

The Cyber Security Services Division Director develops, implements and monitors a strategic, comprehensive enterprise information security and IT risk management program to ensure the integrity, confidentiality and availability of information owned, controlled or processed by the organization. She/he focuses on Cyber Security risk management, significant changes in our business environment, and the ever-more complicated technology and threat landscape. It is expected that she/he formalizes a security and risk program and facilitates information security governance through implementation of a hierarchical governance program.

Salary

$118,643 - $207,750

Benefits

Click HERE to view our Benefits at a glance

Core Competencies

• Customer Commitment - Proactively seeks to understand the needs of the customers and provide the highest standards of service.
• Dedication to Professionalism and Integrity - Demonstrates and promotes fair, honest, professional and ethical behaviors that establishes trust throughout the organization and with the public we serve.
• Organizational Excellence - Takes ownership for excellence through one's personal effectiveness and dedication to the continuous improvement of our operations.
• Success through Teamwork - Collaborates and builds partnerships through trust and the open exchange of diverse ideas and perspectives to achieve organizational goals.

Duties and Responsibilities

Note: The following duties are illustrative and not exhaustive. The omission of specific statements of duties does not exclude them from the position if the work is similar, related, or a logical assignment to the position. Depending on assigned area of responsibility, incumbents in the position may perform one or more of the activities described below.

• Develops, implements and monitors a strategic, comprehensive enterprise information security and IT risk management program to ensure integrity, confidentiality and availability of information owned, controlled or processed by the organization.
• Manages the enterprise's security organization to ensure the team operates efficiently and effectively, including hiring, training, staff development, and performance management to ensure a culture of continuous improvement, ensuring the team remains agile and prepared to tackle emerging security challenges.
• Facilitates governance, risk, and compliance by implementing a hierarchical governance program, which includes establishing an information security steering committee or advisory board.
• Develops, maintains and publishes up-to-date security policies, standards and guidelines, and oversees training and dissemination of security policies and practices. Creates a framework for roles and responsibilities regarding information ownership, classification, accountability and protection.
• Authorizes, performs, and/or delegates forensic investigations related to security incidents.
• Working with Human Resources or other appropriate authorities, authorizes, performs, or delegates insider and personnel digital investigations.
• Creates, communicates and implements a risk-based process for vendor risk management, including assessment of and treatment for risks that may result from partners, consultants and other service providers.
• Develops and manages information security budgets and monitors them for variances, including securing grants, advocating for budget allocations, and obtaining state cybersecurity funding.
• Creates and manages information security and risk management awareness training programs for all employees, contractors and approved system users.
• Works directly with the business units to facilitate IT risk assessment and risk management processes and works with stakeholders through the enterprise on identifying acceptable levels of residual risk.
• Provides periodic reporting on the status of the information security program to enterprise risk teams, and senior management leaders as part of a strategic enterprise risk management program.
• Other related duties as assigned.

Job Specifications

• Ability to manage difficult situations with composure and maintain effective relationships.
• Skilled in oral and written communication, including grammar, composition, and active listening.
• Skilled in collecting, analyzing, and interpreting complex data.
• Ability to apply logic and sound judgment to solve problems and evaluate alternatives.