Job Description

We have a client in central Alabama searching for a CISO consultant, 3+ year contract. Hybrid schedule, 2-3 days a week to Montgomery office. Offering competitive salary and benefits.

Responsibilities:

The CISO supports all aspects of Information Security, including:

Senior-level experience in the following areas:

Vulnerability and Threat Management

Security Operations and Incident Response

Policy Development and Compliance

GRC Mechanics and Frameworks

Ability to lead, build, and motivate the information security team to achieve tactical and strategic goals.

Can work effectively with multiple state agencies to facilitate information security risk assessment and management processes.

Essential Job Duties

• Manage information security policies, standards, enterprise security plan, risk management, metrics, reports, and enforcement. Responsible for compliance with external authorities, including: IRS, CJIS, PCI DSS, legislative and executive orders, and the Division of Information Security & Enterprise Privacy Office.
• Manage all aspects of information security architecture
• Maintain accountability for Network and Security Operations Center to include monitoring for cyber intrusions, compliance with security policies, security device integrity, and IT system health. Responsible for detecting and responding to threatening events, including security events and IT operational events
• Establish direction and influence aspects of information security that are not performed under direct control of the Office of the CISO, including IT systems (CIO), employee awareness (training), data privacy (Legal), vendor contracts (Procurement), and joint responsibilities with t of Information Security and Enterprise Privacy Office
• Establish direction for information security aspects of vendor and partner relationships including contracts, memorandums of understanding, and statements of work. Responsible for information security oversight of vendors and partners, including requirements, evaluations, assessments, and audits.
• Oversee the formal data privacy program, including tax disclosure and compliance with Enterprise Privacy Office
• Forecast and direct security and privacy budget controls expenditures of technology, division appropriations, and end-of-life planning
• Oversee the financial activities and resource allocations
• Administer Employee Performance Management Program, staff selection, training, career planning, time tracking, and general personnel matters

Qualifications (Education, Experience and Specialized Training)

• Bachelor’s degree in a related field;
• 10 years or more working professionally in information security or related roles- Achieved increasing professional responsibility including supervision of staff members.
• One of the following certifications: CISSP, CISM, CRISC, or CCISO

Additional Desirable Qualifications

• Master’s degree is desirable.
• Demonstrated commitment to continuous learning including achievement of professional certification(s) such as ISC2 CISSP, SANS GIAC, and/or CompTlA Security+
• Demonstrated track record of operating effectively within a distributed IT structure to achieve shared goals.
• Demonstrates sound judgment, resourcefulness, technical capabilities, analytical abilities, and steady decision making.

Job Tags

Similar Jobs