information security officer

employers

<div><p><b>VP, Chief Information Security Officer</b> | 100% Remote (WFH) Opportunity</p><p><b>
General Summary:</b></p><p>
EMPLOYERS is a century‑old specialty insurance company in the midst of a deliberate technology modernization designed to reshape how the business competes, distributes, and operates. The Chief Information Security Officer will join at a pivotal moment: when security is not yet fully integrated into the fabric of the business, and when the choices made in the next two years will determine whether security enables EMPLOYERS ambitions or merely trails behind them.</p><p>
This is not a role for a technician with an executive title. It is a role for a security leader who thinks strategically, communicates fluently with board members and business unit leaders, and understands that the measure of a security program is not how many controls are deployed: it is whether the business can pursue its goals with confidence.</p><p>
The CISO will report to the Chief Information Officer and will serve as a member of the senior technology leadership team. The security program being built here is still early: existing capabilities without a unifying structure, direction, or connection to business outcomes. That is not a liability. For the right leader, it is a rare opportunity to build something that matters from the ground up.</p><p><b>
What This Leader Will Do</b></p><p><b>
Build the Program</b></p><p>
EMPLOYERS has security capability. What it does not yet have is a cohesive program: one organized around business outcomes, governed with clear accountability, and staffed to the right skill profile. The CISO will design and implement that program from strategy to execution, building on existing strengths while closing gaps with precision rather than excess.</p><ul><li>
Define and operationalize a multi-year Security and Resilience Strategy aligned to the CIO's technology modernization goals</li><li>
Establish a program structure, operating rhythm, and governance model that are sustainable beyond any single leader's tenure</li><li>
Right-size the team, prioritizing critical thinking and adaptability over headcount and developing existing talent toward higher capability</li><li>
Implement outcome-based metrics that communicate security posture in terms business leaders can understand and act on</li><li>
Drive rationalization of the existing security technology portfolio, ensuring tools in use are delivering value and directing investment toward genuine capability gaps</li></ul><p></p><p><b>
Enable the Business</b></p><p>
EMPLOYERS is investing in modernization because it needs to compete differently. That modernization introduces new technology, new partners, new platforms, and new risk. The CISO will be present in those decisions (not as a reviewer after the fact, but as a participant in the design).</p><ul><li>
Serve as a trusted advisor to the CIO, executive team, and Board's Technology Risk and Innovation Committee on security, resilience, and risk</li><li>
Embed security into technology modernization initiatives, including CRM, AI adoption, and digital distribution, at the architecture stage rather than the compliance review stage</li><li>
Develop peer relationships with business unit leaders that make security a collaborative discipline rather than a control function</li><li>
Translate security risk into business consequence in language that informs strategic decisions, not just technical ones</li></ul><p><b>
Govern with Discipline</b></p><p>
EMPLOYERS operates in a regulated environment. New York Department of Financial Services (NYDFS) cybersecurity requirements, Nevada insurance regulations, CPPA, and emerging AI governance frameworks create a fiduciary obligation, not simply a compliance burden. The CISO will manage that obligation as a strategic responsibility.</p><ul><li>
Ensure ongoing compliance with NYDFS Part 500 and applicable state and federal regulatory requirements</li><li>
Lead development and validation of business continuity and disaster recovery capabilities through regular tabletop exercises and operational testing</li><li>
Establish a risk communication cadence, to the CIO and to the Board, that keeps leadership accurately informed and appropriately engaged</li><li>
Build governance processes that move at the speed of the environment, not the speed of the annual audit cycle</li></ul><p><b>
What This Role Is Not</b></p><p>
This position is not a compliance management role. It is not a technology procurement role. It is not a role for a leader who builds influence by controlling access to security decisions rather than by expanding the organization's ability to make good ones.</p><p>
The CISO who will succeed here will be comfortable with ambiguity, energized by building, and capable of leading a small team of strong people toward outcomes that matter, without the organizational machinery that larger enterprises provide. They will know when to bring in expertise and when to develop it internally. They will earn authority through credibility, not through organizational position.</p><p></p><p><b>
What We Are Looking For</b></p><p><b>
Experience and Background</b></p><ul><li>
Ten or more years of progressive security leadership experience, including demonstrated accountability for security programs in regulated industries</li><li>
Proven experience building or substantially rebuilding a security program (not simply maintaining one) with a small, high-capability team</li><li>
Insurance, financial services, or similarly regulated industry experience preferred; a track record of navigating complex regulatory environments is essential</li><li>
Experience leading security functions through significant technology transformation, including cloud migration, digital platform development, AI adoption, or equivalent</li><li>
Direct experience presenting to and advising boards of directors or executive risk committees on security posture, strategy, and material risk</li></ul><p><b>
Leadership and Influence</b></p><ul><li>
Ability to build genuine peer relationships with business leaders, building working partnerships grounded in shared business goals rather than transactional compliance relationships</li><li>
Executive presence and communication skills capable of translating complex security concepts into clear business language for non-technical audiences</li><li>
Track record of developing team members by identifying capability gaps and investing in people rather than compensating with headcount or tooling</li><li>
Comfort operating in organizations where the path forward must be created, not inherited; the instinct to build structure without over-engineering it</li><li>
The judgment to distinguish between what needs to be stable and what needs to adapt continuously, and the organizational credibility to lead both</li></ul><p><b>
Intellect and Approach</b></p><p><b>
This role requires:</b></p><ul><li>
A critical thinker who can reason about adversary behavior, business consequence, and organizational capability without defaulting to vendor frameworks or tool-generated outputs</li><li>
An operator who defines success by outcomes (what the business can do securely), not by activity metrics, control coverage percentages, or audit findings resolved</li><li>
A communicator who can reframe security risk as business intelligence and make that intelligence genuinely useful to executive and board audiences</li><li>
A builder who can create governance processes that keep pace with modern digital environments, not governance designed for infrastructure that no longer exists</li><li>
A leader who invests deliberately in the analytical judgment of their team, because that judgment is the asset that no tool can replicate and no adversary can simply automate around</li></ul><p></p><p><b>
Technical Scope</b></p><ul><li>
Comprehensive understanding of enterprise security architecture across cloud, hybrid, and on-premises environments</li><li>
Familiarity with AI security risk, including model integrity, data pipeline security, and third-party AI supply chain considerations</li><li>
Working knowledge of NYDFS Part 500, NIST CSF, CPPA, and applicable insurance regulatory requirements</li><li>
Experience with security technology portfolio management, including evaluating, rationalizing, and governing tools across the security stack</li><li>
Proficiency with business continuity and disaster recovery program design and operational validation</li></ul><p><b>
Location and Compensation</b>.</p><p><b>
Work Environment</b></p><p>
This position is fully remote, with minimal travel expected. The CISO will maintain regular virtual engagement with the CIO organization, executive leadership team, and board-level stakeholders.</p><ul><li>
This role potentially and will routinely use office equipment such as computers, phones, printers, and web conferencing technology as examples.</li><li>
This is largely a sedentary role; however, some mobility is required.</li><li>
May work early, late, or occasional weekend hours to accommodate business needs.</li><li>
Occasional lifting of a maximum of 30lbs.</li><li>
Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.</li></ul><p><b>
Compensation:</b></p><p>
EMPLOYERS offers a competitive executive compensation package including base salary, annual incentive, long-term equity participation, and a comprehensive benefits program commensurate with the seniority and scope of this role</p><p>
Base Salary Range: $155,000 - $225,000 please follow the link to our benefits page for additional details! EMPLOYERS Benefits and Perks</p><p></p><p><b>
About EMPLOYERS:</b></p><p>
As a dynamic, fast-growing provider of workers' compensation insurance and services, we are seeking a goal-oriented individual willing to put their ideas to work!</p><p>
We offer a positive, challenging work environment, combined with an opportunity to build your career as you help us grow our business, in innovative and imaginative ways that are uniquely <b>EMPLOYERS</b>&reg;!</p><p>
Headquartered in Nevada, <b>EMPLOYERS </b>attributes its long-standing success to its most valuable resource, our employees across the United States. <b>EMPLOYERS </b>is known for the quality service and expertise we provide to our clients, and the exemplary work environment we provide for our employees.</p><p>
We live and breathe our core values: Integrity, Customer Focus, Collaboration, Initiative, Accountability, Innovation, and Personal Fulfillment. These are the pillars that support how we do business with our clients as well as how we treat each other!</p><p>
At <b>EMPLOYERS</b>, you&rsquo;ll discover an energetic environment that inspires top achievement. As &ldquo;America&rsquo;s small business insurance specialist&rdquo;, we have the resources, a solid reputation and an expanding nationwide identity to enrich your work/life and enhance your career. #LI-Remote</p><p>
Click our link to learn more! About EMPLOYERS</p></div>

VP, Chief Information Security Officer

Foxconn Industrial Internet - FII

<div><b>Key Responsibilities:</b><ul><li>
Develop, implement, and maintain the organization&rsquo;s information security strategy, policies, and procedures</li><li>
Identify, assess, and manage cybersecurity risks and vulnerabilities</li><li>
Monitor security systems and respond to incidents, breaches, and threats in a timely manner</li><li>
Ensure compliance with relevant laws, regulations, and industry standards (e.g., GDPR, ISO 27001, 27701 NIST)</li><li>
Conduct regular security audits, risk assessments, and penetration testing</li><li>
Collaborate with IT and other departments to ensure secure system design and operation</li><li>
Lead incident response and forensic investigations when necessary</li><li>
Provide security awareness training and guidance to employees</li><li>
Manage third-party security risks and vendor assessments</li><li>
Prepare reports and present security posture updates to senior management</li></ul><b>
Required Qualifications:</b><ul><li>
Bachelor&rsquo;s degree in Information Security, Computer Science, or a related field</li><li>
Proven experience in information security, cybersecurity, or IT risk management</li><li>
Strong knowledge of security frameworks, standards, and best practices</li><li>
Experience with security tools such as SIEM, IDS/IPS, firewalls, and endpoint protection</li><li>
Understanding of network architecture, operating systems, and cloud security</li><li>
Relevant certifications preferred (e.g., CISSP, CISM, CISA, CEH)</li></ul><b>
Key Skills:</b><ul><li>
Strong analytical and problem-solving abilities</li><li>
Excellent communication and leadership skills</li><li>
High level of integrity and attention to detail</li><li>
Ability to handle sensitive information with confidentiality</li><li>
Strong project management and organizational skills</li></ul><br>
<b>
Benefits:</b><ul><li>
401(k)</li><li>
Dental insurance</li><li>
Health insurance</li><li>
Life insurance</li><li>
Vision insurance</li><li>
Paid holidays</li><li>
Paid time off</li></ul>
Foxconn is an Equal Opportunity Employer and Drug Free Workplace. Qualified applicants will receive consideration for employment without regard to their race, color, religion, national origin, sex, sexual orientation, gender identity, protected veteran status or disability.<br>
<p>
</p><p>Sp67UeKrK9</p></div>

Information Security Officer (ISO 27001)

Novant Health

<div>What We Offer:
<div>
The Chief Information Security Officer (CISO) will serve as the senior executive responsible for<br>
cybersecurity, digital trust, and technology risk across a large integrated healthcare system. Reporting to the Executive Vice President &amp; Chief Digital and Information Officer, the CISO will lead the development and execution of a modern enterprise cybersecurity strategy that protects clinical operations, patient data, and digital platforms while enabling innovation and growth.</div><div></div><div><br>
Healthcare is rapidly becoming one of the most digitally complex industries. From electronic health records and connected medical devices to artificial intelligence and digital patient engagement platforms, technology is deeply embedded in care delivery. The CISO will play a critical role in ensuring the organization remains secure, resilient, and trusted while advancing its digital transformation journey.</div><div></div><div><br>
This role goes beyond traditional cybersecurity operations. The CISO will operate as an enterprise risk leader responsible for shaping how cybersecurity supports patient safety, operational continuity, and responsible digital innovation.</div><div><br>
The successful candidate will partner closely with executive leadership, clinical teams, and the board to ensure cybersecurity is embedded into enterprise strategy rather than treated as a standalone technical function.</div>
What You'll Do:
<p><b>
Education: </b>4 Year / Bachelors Degree, required. Computer Science, Information Systems, Engineering or related academic discipline. Graduate Degree, preferred. Information Technology.</p><p><b>
Experience:</b></p><ul><li>
10+ required. Minimum of 15 years. Progressive leadership<br>
experience in cybersecurity, information security, or technology risk.</li><li>
10+ preferred. Minimum of 15 years. Experience leading cybersecurity programs in large, complex organizations.
</li></ul><p><b>Licensure/Certification:
</b></p><ul><li>CISSP and CompTIA Security+ and ITIL Foundation (or equivalent), required.
</li><li>CISM, CRISC, CGEIT, CISA, CASP, COBIT Foundation (or equivalent), required.</li></ul><div><b>
Additional Skills/Requirements (required)</b></div><ul><li>
Demonstrated ability to engage with executive leadership teams and boards of directors</li><li>
 Experience building or transforming cybersecurity programs at enterprise scale.</li></ul><div><b>
Additional Skills/Requirements (preferred)</b></div><ul><li>
Strong understanding of healthcare regulatory and operational environment</li></ul></div>

SVP & Chief Information Security Officer

Texas Comptroller of Public Accounts

<div><div><b>OAG - Enterprise Information Security | Chief Information Security Officer | 26-0234</b> <b>(</b><b>00056888</b><b>)</b><div>
</div><b>
Organization</b><b>:</b> OFFICE OF THE ATTORNEY GENERAL<div>
</div></div><div><b>
Primary Location</b><b>:</b> Texas-Austin<div>
</div><b>
Work Locations</b><b>:</b> ITS - Admin 300 W. 15th St Austin 78701<div></div><div><br>
</div></div><div><b>
Job</b><b>:</b> Computer and Mathematical<div>
</div></div><div><b>
Employee Status</b><b>:</b> Regular<div>
</div></div><div><b>
Schedule</b><b>:</b> Full-time<div>
</div><b>
Standard Hours Per Week</b><b>:</b> 40.00<div>
</div></div><div><b>
State Job Code</b><b>:</b> 0239<div>
</div></div><div><b>
Salary Admin Plan</b><b>:</b> B<div>
</div></div><div><b>
Grade</b><b>:</b> 32<div>
</div></div><div><b>
Salary (Pay Basis)</b><b>:</b> 14,583.33 - 17,083.34 (Monthly)<div>
</div></div><div><b>
Number of Openings</b><b>:</b> 1<div>
</div></div><div><b>
Overtime Status</b><b>:</b> Exempt<div>
</div></div><div><b>
Job Posting</b><b>:</b> Mar 12, 2026, 3:24:05 PM<div>
</div></div><div><b>
Closing Date</b>: Ongoing<div>
</div></div><div><b>
Description</b><div></div><p><b><br>
GENERAL DESCRIPTION</b><br>
The CISO leads the Office of the Attorney General&rsquo;s (OAG) information security program, setting vision and strategy to protect information assets, systems, and infrastructure. This role partners with internal divisions, state and federal agencies, and vendors to implement best-in-class security practices aligned with policies and standards.</p><div>
Key responsibilities include:<br>
<ul><li>Developing, maturing, and executing OAG&rsquo;s cybersecurity strategy and program.</li><li>Advising the Office of the CIO on security risks and acceptable risk levels.</li><li>Overseeing cybersecurity operations, risk management, and incident response.</li><li>Embedding security into digital transformation initiatives, including cloud expansion and modernization.</li><li>Driving adoption and enforcement of security policies and procedures.</li><li>Leading a high-performing team of security professionals.</li></ul></div><p>
The ideal candidate demonstrates servant leadership, fosters collaboration, and proactively addresses emerging threats. This position reports to the CIO and supports OAG&rsquo;s mission to deliver secure, high-quality technology services for Texans.</p><p>
The OAG is a dynamic state agency with over 4,000 employees throughout the State of Texas, and is committed to providing innovative, modern, and value-driven IT services to the agency. We believe that having talented people in the right place while effectively utilizing new tools and technologies enables us to empower the agency to best serve the people of Texas. OAG employees enjoy excellent benefits (https://ers.texas.gov/Benefits-at-a-Glance) along with tremendous opportunities to do important work at a large, dynamic state agency making a positive difference in the lives of Texans.</p><p><b><br>
ESSENTIAL POSITION FUNCTIONS</b></p><ul><li>
Leads the agency&rsquo;s information security function to ensure consistent, high-quality security management aligned with agency goals and the protection of information assets, technologies, applications, systems, infrastructure, and processes.</li><li>
Establishes and enforces cybersecurity standards, policies, and procedures to maintain service continuity during changes, security incidents, or disaster recovery events.</li><li>
Develops and oversees a strategic, comprehensive information security program ensuring confidentiality, integrity, availability, privacy and recovery of organizational information assets.</li><li>
Operates and manages the Security Operations Center (SOC) to monitor infrastructure for cyber threats, including external attacks and insider risks.</li><li>
Builds and leads a skilled team of security professionals responsible for risk reduction, incident response, and collaboration with business and technical stakeholders during cyber events.</li><li>
Directs threat intelligence collection, analysis, and dissemination to internal teams and partner organizations to strengthen cybersecurity posture.</li><li>
Conducts security assessments, risk analyses, and audits; defines and maintains security standards and compliance requirements.</li><li>
Represents the agency in internal and external forums on information security strategy and represents information security in IT and executive governance committee.</li><li>
Oversees security awareness, communication, and training programs to promote a strong security culture across the organization.</li><li>
Performs related work as assigned</li><li>
Maintains relevant knowledge necessary to perform essential job functions</li><li>
Attends work regularly in compliance with agreed-upon work schedule. Telework schedules are permitted for employees based on the agency&rsquo;s approved Telework Plan (if schedule does not adversely affect operations and service levels, and standard hours of operation are maintained). Telework schedules are set by the Departments based on business needs.</li><li>
Ensures security and confidentiality of sensitive and/or protected information</li><li>
Complies with all agency policies and procedures, including those pertaining to ethics and integrity</li></ul><div>
</div></div><div><b>
Qualifications</b><div></div><p><b><br>
MINIMUM QUALIFICATIONS</b></p><ul><li>
Education: Graduation from high school or equivalent</li><li>
Education: Graduation from an accredited four-year college or university with major coursework in cybersecurity, information technology, computer engineering, computer information systems, computer science, management information systems, or a related field is generally preferred; experience in the following (or closely related) fields may be substituted for the required education on a year-for-year basis: information security, information technology, or risk management</li><li>
Experience: 10 years of full-time experience working in the following (or closely related) fields: information security, information technology, or risk management</li><li>
Experience and technical mastery in cybersecurity analysis work, with emphasis on security operations, incident management, intrusion detection, information protection, security systems deployment, and security event analysis</li><li>
Experience in building and/or maturing a Security Operations Center, including the integration of monitoring, threat intelligence, forensic analysis, and incident response</li><li>
Knowledge of local, state, and federal laws and regulations relevant to information security, privacy, and computer crime; of the principles and practices of public administration and management; of the limitations and capabilities of computer systems; of technology across all network layers and computer platforms; of operational support of networks, operating systems, Internet technologies, databases, and security applications; of cybersecurity controls, procedures, and regulations; and of incident response program practices and procedures</li><li>
Skill in the use of a computer and applicable software; and in configuring, deploying, and monitoring security infrastructure</li><li>
Ability to manage and oversee the development, monitoring, and maintenance of security processes and controls; to identify problems, evaluate alternatives, and implement effective solutions; to develop and evaluate policies and procedures; to prepare reports; to implement security best practices and awareness; to communicate effectively; and to supervise the work of others</li><li>
Ability to provide excellent customer service</li><li>
Ability to arrange for personal transportation for business-related travel</li><li>
Ability to work more than 40 hours as needed and in compliance with the FLSA</li><li>
Ability to lift and relocate 10 lbs.</li><li>
Ability to travel (including overnight travel) up to 10%</li></ul><p><b><br>
PREFERRED QUALIFICATIONS</b></p><ul><li>
Certifications: Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC)</li></ul><p><b>
TO APPLY</b></p><p>
To apply for a job with the OAG, electronic applications can be submitted through CAPPS Recruit. A State of Texas application must be completed to be considered, and paper applications are not accepted. Your application for this position may subject you to a criminal background check pursuant to the Texas Government Code. Military Crosswalk information can be accessed at https://hr.sao.texas.gov/Compensation/MilitaryCrosswalk/MOSC_InformationTechnology.pdf</p><p><b>
THE OAG IS AN EQUAL OPPORTUNITY EMPLOYER</b></p></div></div>

OAG - Enterprise Information Security | Chief Information Security Officer | 26-0234

soum

<div><div>Work Week: Sunday - Thursday</div>
<div>Work Timings: 9 AM - 6 PM (Saudi Arabian Time Zone)</div>
<div></div>
<div><b>About Us:
</b></div><div>Soum is on a mission to revolutionize e-commerce in the MENA region and beyond by building the most convenient and trustworthy re-commerce marketplace in the region. We're reshaping how C2C marketplaces operate, making buying and selling second-hand products seamless and reliable. Since our launch in July 2021, Soum has become one of the fastest-growing startups in the region, achieving rapid expansion in both our team and product offerings. In recognition of our impact and growth, we were proudly named one of the Top 10 LinkedIn Startups in Saudi Arabia for 2024.</div>
<div></div>
<div><b>Job Summary:
</b></div><div>We are looking for a virtual cybersecurity or compliance expert to guide our security posture, particularly as we move into regulated spaces like auto-financing. The role is ideal for someone with extensive regulatory familiarity and previous experience operating in a strategic advisory capacity.</div>
<h3 class="jobSectionHeader"><b>Key Responsibilities
</b></h3><ul><li>Lead compliance audits aligned with <b>KSA regulations</b>, especially <b>SAMA frameworks</b></li>
<li>Review and implement data security strategies across departments</li>
<li>Support regulatory submissions and responses for fintech operations</li>
<li>Oversee documentation and data protection practices</li>
<li>Coordinate with product and legal teams to maintain standards</li>
</ul><h3 class="jobSectionHeader"><b>Ideal Profile</b></h3><ul>
<li><b>Saudi national 6+ years experience</b></li>
<li>Deep understanding of <b>SAMA regulatory requirements</b> and KSA cybersecurity law</li>
<li>Prior role as <b>vCISO or senior security/compliance consultant</b></li>
<li>Experience operating through or with an <b>agency setup (ideal)</b></li>
<li>Familiarity with ISO 27001, NIST, SOC 2 compliance standards</li>
<li>Ability to lead cross-functional audit and compliance efforts across departments</li>
</ul>
<p>We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</p></div>

Chief Information Security Officer (vCISO) / Compliance Officer

<div><p>ECS is seeking an <b><i>Information Systems Security Officer </i></b>to work in our <b><i>Fairfax, VA </i></b>office.
</p><p></p><p>ECS is seeking a detail-oriented Information System Security Officer (ISSO) to support cybersecurity operations for U.S. Navy information systems. The ISSO will work under the direction of the ISSM and program leadership to ensure systems meet DoD and Department of the Navy (DON) cybersecurity requirements under the Risk Management Framework (RMF).</p>
<p>
The ideal candidate will have experience supporting Navy systems and maintaining RMF packages in eMASS, with familiarity across Navy environments such as NAVWAR, NAVAIR, NAVSEA, or Fleet Cyber Command.</p>
<p>
</p><ul><li>Support the implementation and maintenance of RMF in accordance with:
<ul><li>DoDI 8510.01 (Risk Management Framework)</li>
<li>DoDI 8500.01 (Cybersecurity)</li>
</ul></li><li>Assist in developing, updating, and maintaining RMF documentation, including:
<ul><li>System Security Plans (SSPs)</li>
<li>Security Control Traceability Matrices (SCTMs)</li>
<li>Plan of Action &amp; Milestones (POA&amp;Ms)</li>
<li>Continuous Monitoring artifacts</li>
</ul></li><li>Implement and validate security controls based on:
<ul><li>NIST SP 800-53 Rev. 5</li>
<li>NIST SP 800-37 Rev. 2</li>
</ul></li><li>Maintain and update system records in eMASS, ensuring accuracy and completeness</li>
<li>Conduct routine security control checks and support formal Security Control Assessments (SCAs)</li>
<li>Perform vulnerability management activities, including:
<ul><li>Running and analyzing ACAS scans</li>
<li>Applying and validating DISA STIGs/SRGs</li>
<li>Tracking remediation actions to closure</li>
</ul></li><li>Monitor system security posture and support continuous monitoring (CONMON) activities</li>
<li>Support incident response efforts in accordance with:
<ul><li>DoDI 8530.01 (Cyber Incident Response)</li>
<li>Navy Cyber Defense Operations processes</li>
</ul></li><li>Assist with audits, inspections, and cybersecurity reviews (e.g., FISMA, DON CIO inspections)</li>
<li>Provide day-to-day cybersecurity support to system administrators, engineers, and developers</li>
<li>Ensure proper configuration management and secure baseline enforcement across systems</li>
</ul>Requirements:
<ul><li><b><i>Active Secret clearance (TS/SCI preferred)</i></b></li>
<li><b><i>Bachelor's degree in Cybersecurity, Information Technology, or related field (or equivalent experience)</i></b></li>
<li>5&ndash;7+ years of cybersecurity experience, with ISSO or ISSO-support experience in a DoD/Navy environment</li>
<li>Hands-on experience with RMF processes and artifacts</li>
<li>Experience working in eMASS</li>
<li>Working knowledge of:
<ul><li>NIST SP 800-53 Rev. 5 controls</li>
<li>NIST SP 800-37 Rev. 2 (RMF)</li>
<li>DoDI 8500.01 / 8510.01</li>
<li>SECNAV M-5239.1 (DON Cybersecurity Manual)</li>
</ul></li><li>Experience supporting Navy or DoD systems (e.g., NAVWAR, NAVAIR, NAVSEA, USMC)</li>
<li>Familiarity with:
<ul><li>DISA STIGs and compliance tools</li>
<li>ACAS vulnerability scanning</li>
<li>Endpoint security tools (e.g., HBSS/ESS)</li>
</ul></li><li>Must meet DoD 8140 (formerly 8570.01-M) IAT Level II or higher requirements, such as:
<ul><li>Security+ (minimum)</li>
<li>CySA+</li>
<li>SSCP</li>
<li>CASP+ (preferred)</li>
</ul>
</li></ul><br>
Req Benefits:
<div>https://ecstech.com/careers/benefits/&quot;&gt;https://ecstech.com/careers/benefits/</div></div>

Information Systems Security Officer

P3S Corporation

<p></p><div><p><b>Certifications: IAM Level II Certification (CAP, CASP CE, CISM, CISSP, GSLC)</b></p><p></p><p>
Pay Rate: $28.00 - $30.00 per hour</p><p></p><p><b>
Type: 100% </b>onsite Ellsworth AFB, SD</p><p></p><p><b>
Clearance: </b>TS/SCI</p><p><b>
Minimum Criteria.</b></p><p></p><ul><li>Bachelor&rsquo;s degree from an accredited college in a related discipline, or equivalent experience/combined education. Preferred</li></ul><p></p><ul><li>IAM Level II certification and an active TS/SCI Government Clearance.</li></ul><p></p><ul><li>Knowledge of computer hardware and maintenance of the operating system (OS)/utility software.</li></ul><p></p><p><b>
Location.</b></p><p></p><p>
100% onsite Ellsworth AFB, South Dakota</p><p></p><p><b>
Who We Need:</b></p><p></p><p>
We are looking for a strategic, experienced <b>Information Systems Security Officer</b> at Ellsworth AFB, South Dakota to support the Air Force Financial Service Center that enjoys challenges and thrives in a fast-paced environment. This essential member of our family will provide Data Security Administration management to the Air Force Financial Services, and Information Assurance knowledge to particular tasks. Team Member will interact with internal and external agencies, AFFSO, HAF/IMSC, and AFFSC leadership and assume efforts based on specialized functional experience</p><p>
</p><p>We do not discriminate on the basis of race, sex, color, religion, national origin, age, disability or veteran status in the provision of services or employment opportunities and benefits.</p><p>
</p><p></p><p><b>Responsibilities</b></p><p></p><ul><li>Provide guidance and direction for the physical protection of information systems assets to other functional units.</li></ul><p></p><ul><li>Maintain operational security posture for an information system or program to ensure information systems security policies, Standards, and procedures are established and followed.</li></ul><p></p><ul><li>Assists with the management of security aspects of the information system.</li></ul><p></p><ul><li>Provide configuration management (CM) for information system security software, hardware, and firmware.</li></ul><p></p><ul><li>Manage changes to system and assesses the security impact of those changes.</li></ul><p></p><ul><li>Prepare and review documentation to include System Security Plans (SSPs), Risk Assessment Reports, Assessment &amp; Authorization (A&amp;A) packages.</li></ul><p></p><ul><li>Ability to learn and apply system security policies, FISMA requirements, regulations, and processes.</li></ul><p></p><ul><li>Apply specialized detailed Air Force Financial Services, and Information Assurance knowledge to a specific task.</li></ul><p></p><ul><li>
Risk Management expert; hands on experience with RMF, eMASS and ITIPS</li><li>
Implement cybersecurity controls and security engineering for enterprise and tactical systems.</li><li>
Address vulnerabilities and maintain product security posture.</li><li>
Review, prepare, and update RMF authorization packages and other security documents as required.</li><li>
Plan and schedule Authority to Operate (ATO) critical path for 1-, 3-, or 5-year accreditations.</li><li>
Conduct assessments of information security controls in order to measure the effectives of controls and identify any gaps.</li><li>
Manage remediation efforts and report on the status of control deficiencies.</li><li>
Provide continuous monitoring security expertise to business units and key stakeholders.</li></ul><p></p><ul><li>Provide timely status updates/reporting on assessments and assigned projects</li></ul><p></p><ul><li>
Assisting with the development of system IA documentation to support certification of compliance to applicable standards including RMF.</li><li>
Ensuring the uninterrupted delivery of information technology systems</li><li>
Maintaining and supporting current and ongoing A&amp;A packages</li><li>
Implementing and supporting cyber security standards to include NIST and Risk Management Framework (RMF) A&amp;A Standards</li><li>
Working with systems owners, government managers, and other stakeholders to manage cyber security requirements.</li><li>
Performing regular systems security scans, and maintaining records of such scans, as required by A&amp;A guidelines.</li><li>
Responding to Information Assurance Vulnerability Alerts (IAVAs) as necessary to address systems vulnerabilities.</li><li>
Reviewing systems security utilization logs per cyber security standards</li><li>
Reviewing and evaluating information technology software, hardware and networks and the overall cyber security posture of information technology systems</li></ul><p></p><p><b>
Special Requirements/Skills:</b></p><p></p><ul><li>Must possess creative and intellectual knowledge of the information technology areas in use at Ellsworth AFB, South Dakota, and demonstrate the ability to exercise discretion and independent judgment in working directly with the customers on a daily basis.</li></ul><p></p><ul><li>Must possess the skills, knowledge, and experience required for the Financial Management role and act as an Information Systems Security Officer for the FM Workflow system.</li></ul><p></p><ul><li>Directs and implements the necessary controls and procedures to cost-effectively protect information systems assets from intentional or inadvertent modification, disclosure, or destruction.</li></ul><p></p><ul><li>Ability to pass any background, drug, and security checks as required by the Company and / or Government.</li></ul></div><p></p>

Search 10000+ Information security officer jobs near you this April. New roles added regularly across leading industries. Apply today.

10000 information security officer jobs Near Me

VP, Chief Information Security Officer

Information Security Officer (ISO 27001)

SVP & Chief Information Security Officer

OAG - Enterprise Information Security | Chief Information Security Officer | 26-0234

Chief Information Security Officer (vCISO) / Compliance Officer

Information Systems Security Officer

Information Systems Security Officer