ALERT Effective January 25, 2024, Executive Order #627 cements the Commonwealth's well-established practice of skills-based hiring, paving the way to a more equitable hiring process. The Commonwealth is committed to ensuring a diverse and inclusive workplace where all employees feel respected, valued, and empowered to serve our citizens. Join us today!
Job Description - Chief Information Security Officer (24000601)About the Organization: The Executive Office of Economic Development (EOED) is a Secretariat within the executive branch of the Commonwealth responsible for directing and executing the Governor's agenda on economic, community and business development, job creation, consumer affairs, and business regulation.
EOED is committed to creating and sustaining a work culture that is welcoming, inclusive, and mutually respectful to all its employees regardless of race, color, age, creed, religion, national origin, ethnicity, sex, gender identity or expression, sexual orientation, genetic information, veteran, or disability status.
About the Role:Reporting to the Secretariat CIO, the Chief Information Security Officer (CISO) position requires an energetic visionary leader who can shape the direction of the cyber program and directly lead program execution. The ideal candidate is a people and thought leader, having significant operational and technology risk management experience. The CISO serves as the process owner of all assurance activities related to the confidentiality, integrity, and availability of information in compliance with the organization's information security policies.
The CISO is responsible for management and oversight of all security related operations relative to EOED's cloud services, hardware and software, compliance, IT audit, business continuity and disaster recovery and security operations, including end point security for approximately 700 employees within EOED.
The ideal candidate is experienced and well versed in cyber security operations and strategies and handles the day-to-day operations of the IT Security and Compliance Program, working closely with partner agencies and IT staff.
Duties and Responsibilities:Align with and adhere to the information technology strategy as defined by secretariat IT and business leadership and in conjunction with EOTSS Security Policies and Guidelines.Lead the management of the EOED Security and Compliance Program.Manage all processes related to incident response and periodic review of access rights.Provide security, management and oversight of cloud-based servers and services in AWS and Azure.Develop security and awareness training materials.Liaise with IT leadership and cross-secretariat CISO's.Oversee business continuity and disaster recovery discussions and exercises.Develop and provide oversight of data privacy and data governance policies.Participate in CISO Council Committee meetings.Support technical needs of the programs as relates to security.Knowledge, Skills and Abilities:Six (6) plus years of relevant full-time experience in Information Technology with focus on Networking, Infrastructure, and Security and Risk Management.Minimum of two (2) years of leadership experience.Minimum of one (1) year of people or project management experience.Ability to communicate effectively both orally and in writing.Hands-on experience with network topology, security monitoring tools, PC and server hardware, and cloud operations.Minimum Entrance Requirements:Applicants must have at least (A) six (6) years of full-time or, equivalent part-time, professional experience, of which (B) at least two (2) years must have been in a project management, supervisory or managerial capacity.
Primary Location:1000 Washington Street, Boston, Massachusetts 02118
Schedule:Monday through Friday, 9:00AM to 5:00PM EST, with a hybrid model of in-office and remote work.
Salary:$95,982.38 - $115,000.00 Yearly
An Equal Opportunity / Affirmative Action Employer.
#J-18808-Ljbffr
