Information Security Officer - #01086

The Corrections Technology Services Unit is seeking an Information Security Officer to enhance and manage the IT Security program of the Department of Corrections. 

The ISO will help achieve the Department’s mission by ensuring that the Department’s information and information systems are adequately protected. 



Responsibilities:
 
Developing, implementing and maintaining IT Security policies, standards, guidelines and procedures; identifying IT Security goals, objectives and metrics consistent with the Department’s Strategic Plan and the Technology Strategic Plan; providing technical guidance on information security using knowledge of information security management, security assessments, analysis, security laws, policies, rules and regulations; maintaining IT recovery plans that are integrated with and fully support the Department’s overall Continuity Of Operations Plan (COOP), and ensuring IT Disaster Recovery (DR), COOP plans, and Security Awareness Training (SAT) activities are aligned and regularly reviewed, revised and tested; serving as single point of contact for DOC IT Security Incident reporting; ensuring IT Security requirements are addressed in the procurement of external service providers, consultants and other third party security services; developing an IT Security review, compliance and risk management program in conjunction with the Office of Inspector General for random information security assessments; acting as the Department’s IT Security point of contact with all internal and external agencies, departments and vendors; and maintaining constituent relationships required to insure sound IT Security.

 

Qualifications:

College Degree in Information Technology or Information Systems, and considerable experience performing information security activities; or an equivalent combination of education and experience is required. 

Experience in developing and reviewing information security guidelines, standards, policies and procedures; strong communication and interpersonal skills; a thorough understanding of information systems as it relates to IT Security; and strong analytical, planning, and assessment skills related to information security are required. 

A thorough understanding of information security policies and practices as they relate to applications, hardware, and COTS packages; and risk assessment and contingency planning is required.

Working knowledge and experience in multiple operating system environments and platforms, and experience with the Microsoft Office suite of products is desired. 

Certified Information Systems Security Professional (CISSP), Systems Security Certified Practitioner (SSCP), or GIAC Security Essentials Certification (GSEC) is desired. 

Project management skills and corrections experience is desired.




State applications will be accepted until the position is filled. To be considered for this vacancy, submit a fully completed state application to the Human Resource Department in Richmond, Virginia. Resumes will not be accepted in lieu of a fully completed state application.

Send State applications to:
Virginia Department of Corrections
Human Resources
P.O. Box 26963
Richmond, VA 23261
Fax: 804-674-3584
Email: humanresources@vadoc.virginia.gov


 



The Virginia Department of Corrections offers an excellent array of benefits, many of which an employee may elect based on there personal needs. In addition to salary, the Commonwealth pays you in benefits.

These benefits include, but are not limited to:
Competitive Salaries
Health Care
Dental Care
Paid Holidays
Annual, Sick, and Family/Personal Leave
College Tuition Reimbursement
Retirement Benefits
Life Insurance
Flexible Reimbursement Accounts for child care and medical needs
Deferred Compensation
Credit Union Services
Supplemental and Optional Insurances
CommonHealth (a wellness program)
...and many more

For more information about the Virginia Department of Corrections, visit our website at www.vadoc.virginia.gov.  The Virginia Department of Corrections is an Equal Opportunity Employer.