STATE CHIEF INFORMATION SECURITY OFFICER - 72004041

Requisition No: 853309 

Agency: Management Services

Working Title: STATE CHIEF INFORMATION SECURITY OFFICER - 72004041

 Pay Plan: SMS

Position Number: 72004041 

Salary:  $205,485.00 

Posting Closing Date: 05/31/2025 

Total Compensation Estimator Tool

State Chief Information Security Officer
Florida Digital Service
State of Florida Department of Management Services
This position is located in Tallahassee, FL 

Position Overview and Responsibilities:
The Chief Information Security Officer (CISO) for the State of Florida is responsible for leading the state's cybersecurity strategy, establishing standards, and maintaining compliance with state and federal regulations. This role involves collaboration with various stakeholders to mature agency cybersecurity programs, oversee cybersecurity operations, manage risks, and respond to cybersecurity incidents in accordance with Florida Statutes. The State CISO must be an effective leader with proven abilities to build and manage highly motivated teams with a commitment to accomplishing the mission.

 

Responsibilities:

1. Strategic Planning: Develop and annually update a comprehensive statewide cybersecurity strategic plan by February 1, detailing security objectives, risk mitigation strategies, and key initiatives over a three-year horizon.
2. Governance Framework: Develop and publish a cybersecurity governance framework for state agencies, including guidelines for asset management, risk assessment, threat detection, incident response, and recovery procedures.
3. Risk Assessments: Oversee the completion of comprehensive cybersecurity risk assessments for state agencies, ensuring they are conducted every three years and comply with standardized methodologies.
4. Incident Response: Establish and lead agency cybersecurity incident response teams, ensuring timely reporting and effective management of cybersecurity incidents, including breaches involving confidential or exempt data.
5. Cybersecurity Operations Center: Operate and maintain a Cybersecurity Operations Center providing comprehensive enterprise monitoring and detection services and acting as a clearinghouse for threat information while coordinating with the Department of Law Enforcement.
6. Business Continuity: Lead the Emergency Support Function (ESF 20) under the state comprehensive emergency management plan, coordinate cybersecurity efforts during emergencies and facilitate enterprise business continuity planning, testing, and training.
7. Training and Awareness: Develop and maintain cybersecurity training guidelines and framework for state agencies. Provide annual cybersecurity training for state agency information security managers and incident response team members, in collaboration with the Cybercrime Office of the Department of Law Enforcement.
8. Compliance Assistance: Assist state agencies in complying with cybersecurity requirements, including the development of strategic and operational cybersecurity plans
9. Procurement Oversight: Provide recommendations to update procurement processes for IT acquisitions to align with National Institute of Standards and Technology (NIST) Cybersecurity Framework standards.
10. Policy Development: Develop and periodically update policies and procedures for reporting cybersecurity incidents and breaches, ensuring consistency with Florda Statutes, industry standards, and best practices.
11. Performance Measures: Implement cybersecurity metrics and reporting systems to monitor the effectiveness of enterprise security initiatives and operations.

 Knowledge, Skills, and Abilities:

• Proficient in threat detection methodologies and incident response planning.
• Proficient in managing large-scale cybersecurity initiatives and operations.
• Proficient in leading cross-functional teams, fostering collaboration, accountability, and alignment with strategic objectives.
• Knowledge of cybersecurity fundamentals.