Airport Assistant General Manager, Chief Information Security Officer (CISO)

 

General Description & Classification Standards:

The Chief Information Security Officer (CISO) is a pivotal executive role within the Information Technology (IT) department, directly reporting to the Chief Information/Technology Officer. The CISO is responsible for leading the organization's information security efforts, ensuring the confidentiality, integrity, and availability of data and systems. This role requires a deep understanding of cybersecurity principles, regulatory compliance, risk management, and effective leadership to safeguard the organization against cyber threats.

 

Essential Duties & Responsibilities:

·        Cybersecurity Strategy:

o   Develop and implement a comprehensive cybersecurity strategy aligned with the Department of Aviation (DOA) objectives and industry best practices.

·        Risk Management:

o   Identify, assess, and prioritize cybersecurity risks, and develop risk mitigation strategies to protect the organization's assets.

·        Regulatory Compliance:

o   Ensure compliance with relevant regulations, laws, and standards pertaining to information security, such as FAA, TSA, GDPR, PCI-DSS.

·        Incident Response:

o   Establish and maintain an incident response plan, including protocols for detecting, responding to, and recovering from cybersecurity incidents.

·        Security Awareness:

o   Oversee security awareness training programs to educate employees about cybersecurity best practices and promote a culture of security.

·        Security Governance:

o   Establish and enforce security policies, standards, and procedures to safeguard information assets and maintain regulatory compliance.

·        Vendor Risk Management:

o   Assess and manage cybersecurity risks associated with third-party vendors and service providers.

·        Security Operations:

o   Oversee security operations, including monitoring, threat intelligence, vulnerability management, and security infrastructure management.

·        Modern Cybersecurity:

o   Understand and support DevSecOps practices.

o   Implement the Zero-Trust methodology.

o   Apply Artificial Intelligence (AI) cybersecurity practices where appropriate.

·        Executive Leadership:

o   Provide strategic guidance and leadership to the IT security team, ensuring alignment with organizational goals and objectives.

 

Minimum Qualifications:

·        Education and Experience:

o   Bachelor's degree in information technology or cybersecurity or a related field and a minimum of 10 years’ experience in information security, with progressive leadership responsibilities 

or 

o   A minimum of 15 years’ experience in information security, with progressive leadership responsibilities without an equivalent degree (equivalent professional experience may be considered for substitution for the required degree on an exception basis).

o   Proven track record of success in developing and implementing cybersecurity strategies in medium to large organizations.

o   Strong understanding of cybersecurity frameworks such as NIST, ISO 27001, etc.

·        Leadership and Communication:

o   Significant experience as an IT leader in medium to large organizations.

o   Demonstrated ability to incorporate core values of integrity, collaboration, accountability, respect, and excellence (ICARE).

Preferred Qualifications:

·        Advanced Education and Experience:

o   Master's degree in information technology or cybersecurity.

·        Communication and Collaboration Skills:

o   Excellent communication skills with the ability to effectively communicate complex cybersecurity concepts to non-technical stakeholders.

·        Experience with Emerging Technologies:

o   Experience with emerging technologies such as cloud computing, IoT, AI, and their implications for cybersecurity.

·        Certifications:

o   Relevant industry certifications such as CISSP, CISM, CISA, or similar.

Essential Capabilities and Work Environment

Required physical, lifting, and sensory capabilities are requirements to perform the job successfully. Typical environmental conditions associated with job.

Overall Responsibility Statement:

·        These are t