332 Chief Information Security Officer (CISO)

SUMMARY

The Chief Information Security Officer (CISO) & IT Services Team Lead is a dual role responsible for developing and implementing a comprehensive information security strategy to protect the organization's information assets and leading the IT Services team to ensure efficient and effective IT operations. The role requires a blend of strategic security oversight and hands-on IT service management to support the organization's technological needs and safeguard its digital environment.

This role offers a $10,000 signing bonus upon meeting all specified requirements.

Requirements

Chief Information Security Officer (CISO) Responsibilities:

• Lead the organization's information security program, including developing and implementing security policies, procedures, and controls to ensure data integrity, confidentiality, and availability.
• Develop, implement, and monitor a strategic, comprehensive enterprise information security and IT risk management program.
• Identify, assess, and mitigate information security risks to the organization.
• Oversee the management of security incidents and provide strategic leadership during crisis situations.
• Ensure compliance with all relevant laws, regulations, and industry standards.
• Collaborate with internal and external stakeholders to build and maintain a robust security posture.
• Develop and deliver security awareness and training programs to all employees.
• Evaluate and recommend new security technologies and countermeasures against threats or vulnerabilities.
• Manage and mentor the Information Security team, providing direction and support to achieve departmental goals.
• Report regularly on the status of the information security program to executive leadership

IT Services Team Lead Responsibilities:

• Oversee the daily operations of the IT Services team to ensure the stability and performance of IT infrastructure and systems.
• Develop and implement IT service management (ITSM) processes and best practices to improve service delivery and support.
• Manage the IT support staff, providing guidance, training, and performance evaluations.
• Ensure timely resolution of IT issues and service requests, maintaining high levels of user satisfaction.
• Coordinate with other departments to understand and address their IT needs and requirements.
• Implement and maintain IT asset management practices, including hardware and software inventory.
• Lead projects related to IT infrastructure upgrades, installations, and enhancements.
• Develop and maintain documentation for IT policies, procedures, and standards.
• Monitor IT system performance and implement improvements as necessary.
• Ensure data backup, disaster recovery, and business continuity plans are in place and regularly tested.

Qualifications:

• Bachelor’s degree in Information Security, Computer Science, Information Technology, Cybersecurity, or a related field. A Master's degree is preferred.
• Certifications in CISSP, CISM, CISA, or similar are highly desirable.
• Proven experience (10-15+ years) in information security, IT risk management, and IT service management.
• Excellent leadership and management skills with the ability to build and lead a high-performing team.
• Strong understanding of information security frameworks, standards, and best practices (e.g., FISMA, NIST, ISO 27001, HIPAA, and FedRAMP).
• Proven experience working with federal agencies, specifically HHS, FDA, and DHS, and managing cybersecurity requirements for federal contracts.
• Experience with IT management frameworks (e.g., ITIL).
• Exceptional communication and interpersonal skills with the ability to effectively communicate technical concepts to technical and non-technical stakeholders.
• Strategic thinking and problem-solving skills with the ability to develop and implement effective security and IT service strategies.
• Experience in incident responses, crisis management, and IT project management.

General:

• Strong organizational and communication skills

• Ability to manage multiple tasks and prioritize workload based on the needs of the client
• Ability to deal with ambiguity and frequent changes in priorities
• Ability to work with minimal supervision
• Excellent technical writing skills and proven experience in systems with complex requirements
• Excellent teamwork and interpersonal skills with the ability to team with others to meet project objectives
• Understanding of the system development lifecycle as implemented with Agile; SAFe knowledge