This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The CISO is responsible for developing and implementing a department-wide information security program ensuring confidentiality, integrity, and availability of on-premise and cloud enterprise systems data, and technology assets. The position is responsible for maintaining collaboration and coordination within the department, with our partner state agencies, local governments, Wisconsin tribes, and educational entities.
Job Responsibility:
Developing and implementing a department-wide information security program ensuring confidentiality, integrity, and availability of on-premise and cloud enterprise systems data, and technology assets
Maintaining collaboration and coordination within the department, with our partner state agencies, local governments, Wisconsin tribes, and educational entities
Overseeing agency's IT security program in support of the agency’s strategic business plan
Leading the agency in the developing and maintaining a defensible security program consisting of policies, procedures, standards and controls that protect agency's data, systems, and resources
Champions a risk-aware culture to help safeguard agency's information by applying people, processes, and technologies to minimize IT security, cybersecurity risk and foster IT security and cybersecurity awareness
Requirements:
Progressive and extensive experience in IT, such as information security, cloud security, IT risk management, or cybersecurity operations
Direct and practical experience working with common information security management frameworks, such as ISO/IEC 27001, and NIST 800-53, and similar regulatory compliance standards
Experience in various cybersecurity domains such as incident response, vulnerability management, regulatory compliance reviews, and creation of security awareness training
Experience communicating cybersecurity and risk-related concepts to technical and nontechnical audiences at various levels, ranging from senior executives to technicians
Ability to adapt to and implement change
Excellent decision-making skills
Building and maintaining relationships with a variety of internal and external stakeholders
Staying abreast and informed of latest cybersecurity threats and trends
Nice to have:
Experience in leadership roles in information security or cybersecurity
Security/Risk certification such as Certified Information Systems Security Professional (CISSP) or equivalent Information Security certification
Additional Security/Risk certifications such as Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC) or other SANS certifications in Cloud Security and/or Information Security Management areas
What we offer:
Over 6 weeks paid time off
Excellent insurance options (health, dental, vision, life, and more)