Summary
The Chief Information Security Officer (CISO) establishes and maintains a County-wide information risk management program and performs forensic best practices, including chain-of-custody and acquisition, to ensure that information assets are adequately protected.
The CISO ensures policy compliance with federal, state and local laws and regulations. The CISO performs auditing best practices, tests all information technologies including coordinating, managing and reporting results to the Chief Information Officer (CIO) of external professional services used for audits and testing. The CISO proactively works with local, state and federal agencies to implement practices that meet defined policies and standards for information security. The CISO serves as the process owner of all ongoing activities related to the confidentiality, integrity and availability (CIA Triad) of customer, business partner, employee and business information in compliance with the organization's information security policies.
A key element of the CISO's role is working with executive management to determine acceptable levels of risk for the organization. The incumbent keeps current on legal and technical issues that impact the County.
Posting may close at any time .
Benefits
Tarrant County employees enjoy superior health, retirement, and insurance benefits &
13 County Holidays
For more information, please click on the link below:
http://www.tarrantcounty.com/en/human-resources/employee-benefits.html
Essential Duties And Responsibilities
- Develops, implements, and monitors a strategic, comprehensive enterprise information security and IT risk management program.
- Leads the development and implementation of and monitors and updates as needed the County’s Information Security policies, standards, guidelines and procedures to ensure they stay current and relevant.
- Serves as a technical expert for security frameworks including ISO 27000 series, National Institute of Standards and Technology (NIST), and COBIT.
- Provides strategic risk guidance for IT projects including the evaluation and recommendation of technical controls. Evaluates network threat analysis data and risk assessment results to identify and recommend appropriate security.
- Works directly with business units to facilitate IT risk assessment and risk management processes and works with stakeholders throughout the enterprise on identifying acceptable levels of residual risk.
- Develops and delivers security awareness program for County employees and contractors.
- Ensures alignment between the security and enterprise architectures, coordinating the strategic planning implicit in these architectures.
- Interfaces with IT auditing agencies, both internal and external, to the County.
- Develops and directs the County information security incident management and response program.
- Develops and manages the information security budget.
- Conducts detailed research on emerging technologies through reading and contact with industry and academic experts. Stays current on industry trends and new and emerging technologies.
- Performs all other related duties as required.
Minimum Requirements
NOTE: YOU
MUST FILL OUT THE WORK HISTORY and EDUCATION SECTIONS OF APPLICATION TO SHOW YOU HAVE YEARS OF EXPERIENCE/EDUCATION AS REQUIRED BY HIRING DEPARTMENT OR BE DISQUALIFIED .
TO APPLY, must have a
Bachelor’s degree or higher . Master’s degree preferred.
TO APPLY, must have
Seven (7) full-time years of work experience spanning a broad range of disciplines
of information security practice within a large, complex enterprise environment including forensics, compliance, auditing, testing, and policy development.
TO APPLY, must have
Seven (7) full-time years of work experience
in progressively responsible management positions in information technology.
TO APPLY,
must possess one of the following credentials: Professional security management certification such as a Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Chief Information Security Officer (CCISO), or Certified Information Systems Auditor (CISA).
Control Objectives for Information and Related Technology, COBIT 5 Foundation, or higher a plus. Information Technology Infrastructure Library (ITIL) certification preferred.
A strong background in leading and managing information security implementation, research, and strategic planning at the Information Security Officer-level preferred.
Must have strong skills in communications, collaboration and consensus-building, and teamwork. Prior experience working in state or local government is a plus.
The ISO must have expert/advanced knowledge, capabilities, and competencies in the business environment and must ensure that information systems are maintained in a fully functional and secure mode. Advanced knowledge of current, new, and emerging information security technologies, processes, management and monitoring tools, security convergence, and physical and logical security.
Ability to act in a professionally calm and collective demeanor in high-pressure, high-stress situations such as instances of threat, vulnerability and risk detection, remediation, countermeasures, and management. Must have expert-level knowledge in incident response. High degree of initiative, dependability, and ability to work with little supervision.
Must be an innovative critical thinker with strong problem-solving skills. Excellent analytical skills and ability to manage multiple projects under strict timelines, work well in a demanding dynamic environment, and meet overall objectives. Ability to analyze, review, and act upon data and a variety of descriptive and inferential statistics and metrics having complex facts and issues.
Must have strong project management, financial/budget management, scheduling, and resource management skills. Ability to lead and motivate cross-functional, interdisciplinary teams to achieve tactical and strategic goals.
Must have expert-level knowledge in all areas of defense-in-depth information security domains. Must have strong knowledge of IT audit and information security frameworks. Ability to work well with people from all levels of the organization with varying degrees of technical experience. Ability to express complex technical concepts clearly and concisely both verbally and in writing. Ability to coordinate disparate drivers, constraints, and personalities while maintaining objectivity and a strong understanding of security. Strong skills in business management and professional communication. Knowledge of common information security management frameworks, such as ISO/IEC 27001, ITIL, and COBIT, and familiarity with National Institute of Science and Technology (NIST) standards related to information security. Working knowledge of diverse information security technologies and platforms.
If hired, must provide proof of educational attainment
at New Hire Processing or during the promotional process.
Tarrant County will conduct background checks on new hires that will include a criminal background check related to convictions and deferred adjudications in the past seven years and may include credit reports, motor vehicle records, employment records and educational attainment. A conviction or deferred adjudication is not an automatic bar to employment. Each case is considered individually.
Physical Demands And Work Environment & Other Requirements
While performing the duties of this position, the incumbent is regularly required to sit, stand, bend, stoop, walk, push and pull.