JUSTICE ADMINISTRATIVE COMMISSION- INFORMATION SECURITY MANAGER- 21016330

Requisition No: 864376 

Agency: Justice Administrative Commission

Working Title: JUSTICE ADMINISTRATIVE COMMISSION- INFORMATION SECURITY MANAGER- 21016330

 Pay Plan: Justice Admin Comm.

Position Number: 21016330 

Salary:  $85,000.00 - $95,000.00 

Posting Closing Date: 11/21/2025 

Total Compensation Estimator Tool

 

Our Organization, Vision, and Mission:

 

The Justice Administrative Commission (JAC) is a small (<100 employees) state agency that serves Florida’s State Attorneys, Public Defenders, Criminal Conflict and Civil Regional Counsels, Capital Collateral Regional Counsels, and the Statewide Guardian ad Litem Program. JAC also processes bills from private court-appointed attorneys representing indigent individuals statewide and their associated due process vendors (e.g., court reporters, interpreters, investigators, and expert witnesses) to ensure compliance with Florida Statutes and JAC’s Contracts. JAC hires talented individuals from diverse backgrounds to develop comprehensive solutions for those we serve.

 

To support employees, JAC offers multiple professional growth opportunities, including participation in the Certified Public Manager program, Six Sigma, and other relevant training. JAC also prides itself on providing state-of-the-art information technology services and equipment.

  

The Work You Will Do:

 

The agency information security manager (ISM) is a technical executive leadership role expected to lead and facilitate agency-wide activities related to cybersecurity monitoring, operations, intelligence, and incident response. This position will administer JAC’s cybersecurity program, including awareness training and policies and procedures, as well as help manage JAC’s IT Disaster Recovery Program (DRP) in alignment with the agency’s Continuity of Operations Plan (COOP). This role requires an employee with high initiative, dependability, and the ability to work independently. Excellent written and verbal communication skills are a necessity. Here are some responsibilities of the position:

 

Cybersecurity:

 

• Demonstrate a strong understanding of security standards and best practices and be able to adapt to the evolving cybersecurity landscape.
• Identify and ensure compliance with relevant regulatory and statutory requirements, standards, and industry best practices, including adherence to Chapter 60GG-2, F.A.C., and any relevant statutes. The position will need to keep abreast of evolving regulations and ensure the agency’s compliance with data protection and cybersecurity laws.
• Establish, update, and enforce agency information security policies, standards, and procedures, ensuring that security policies are communicated, understood, and followed throughout the agency.
• Administer recurring and annual cybersecurity training for agency employees.
• Assist in directing the administration, configuration, and daily operations of agency security solutions and planning, development, implementation, and coordination of security aspects of information technology projects and tasks.

 

Incident Response:

 

• Maintain and assist in leading the Computer Security Incident Response Team (CSIRT) for all IT security incidents and breaches, as well as maintain and improve existing incident response plans and documentation.
• Communicate with agency managers regarding security issues and risks and provide recommended actions.
• Report all IT security incidents and breaches to the Florida Digital Service (FLDS) and the Florida Department of Law Enforcement (FDLE). For IT security breaches, provide notice in accordance with ss. 282.318 and 501.171, F.S.

 

Risk Steering:

 

• Assist in establishing and leading an agency risk steering committee to evaluate, prioritize, and mitigate IT-related risks, including 3rd-party and supply chain risks.
• Conduct agency risk assessments, including the comprehensive risk assessments due every three years, per s. 282.318(4)(c), F.S., and maintain the agency risk register and risk remediat