Chief Information Security Officer

About the role

This role provides strategic leadership and oversight for the Council's enterprise-wide information security strategy. Resources are responsible for safeguarding all digital assets and information systems from internal and external threats. The role aligns cybersecurity programs to organizational goals, ensuring that risk management, compliance, and awareness efforts are proactive, robust, and effectively integrated into business operations. The role also leads the information security team, ensuring operational readiness, collaboration across divisions, and continuous improvement of security posture. Resources will act on behalf of the CIO as needed.

Responsibilities

• Define enterprise security strategy and budget; align programs with organizational goals and risk posture.
• Lead information security teams; ensure operational readiness and cross division collaboration.
• Oversee risk management, compliance, and awareness initiatives; drive continuous improvement.
• Safeguard digital assets and information systems from internal and external threats.
• Report security posture to leadership; act on behalf of the CIO as needed.
• Establish governance, policies, and standards; coordinate incident readiness.
• Provide knowledge transfer

Qualifications

• Advanced certifications such as CISSP, CISA, or equivalent.
• Bachelor’s degree with 9 years of experience or comparable combination of degree and years of service.
• 5 years of experience managing staff.
• Strong experience with security frameworks and compliance standards such as NIST, CJIS, HIPAA, ISO, GDPR, and FISMA.
• Strong experience with enterprise security tools, systems, and operations.
• Strong experience in cybersecurity operations, risk frameworks, compliance.
• High conceptual and organizational understanding of how security underpins business operations.