Department of Information Technology
Information Security Group- Dept. of Education
25 Hall St Concord, NH 03301
DEPUTY CHIEF INFORMATION SECURITY OFFICER
#9U385
$97,057.00 - $135,272.00 Annually
*See total compensation information at the bottom of announcement.
The State of New Hampshire, Department of Information Technology, Information Security Group has a full-time vacancy for Deputy Chief Information Security Officer.
SUMMARY:
The Deputy Chief Information Security Officer (DCISO) is a senior-level executive responsible for the enterprise vision, strategy and program to ensure the protection of the State of New Hampshire's information assets including networks, systems and data crucial to state government operations. This position reports to the CISO unless it is covering for the CISO or the CISO becomes unavailable, in which case it reports to the DoIT Commissioner / CIO. This position is responsible for the enterprise vision, strategy and program to ensure the protection of the State of New Hampshire's information assets including networks, systems and data crucial to state government operations.
In addition to these enterprise responsibilities, the DCISO is assigned to the New Hampshire Department of Education to provide direct security leadership and promote statewide student data privacy and school/district/SAU cybersecurity.
MINIMUM QUALIFICATIONS:
YOUR EXPERIENCE COUNTS: Each additional year of approved formal education may be substituted for one year of required work experience and/or each additional year of approved work experience may be substituted for one year of required formal education.
Education: Bachelor's degree from a recognized college or university - advanced degree preferred. Each additional year of approved formal education may be substituted for one year of required work experience.
Experience: Ten years of experience in information technology, legal, privacy, or data management; including at least five years in a management role and three years in cybersecurity, risk, Governance, Risk, Compliance (GRC), or privacy. Relevant areas may include policy and compliance, identity and access management, risk management, operations, physical and network security, or secure software development lifecycle practices. Each additional year of approved work experience may be substituted for one year of required formal education.
License/Certification:
Valid driver's license or access to transportation for use in statewide travel.
Other Requirements:
1. Temporary schedule changes or off-hour work (non-business hours) may be required for incident response, conferences, and other security-related tasks.
2. Must pass a comprehensive background investigation, including a fingerprint-based criminal background check, a motor vehicle driving record check and may include a local police department background check.
3. Additional fingerprint-based clearance for Criminal Justice Services (CJIS) may be required.
Trainee Option: Not Applicable.
PREFERRED QUALIFICATIONS:
Prior experience working directly with K-12 school districts, schools, or other local education agencies.
Experience partnering with non-technical or resource-constrained organizations on security or compliance initiatives. Ability to communicate complex security and privacy concepts clearly to non-technical audiences, including school and district administrators and school boards.
Experience with M365/Entra Identity and Access Management is strongly preferred, as well as in IaaS/PaaS Azure or AWS cloud environments.
Knowledge of numerous cybersecurity technologies.
Ability to use a risk-management approach to security to balance state business requirements and platform supportability.
Organizational, analytical, team building and collaboration skills.
Demonstrated ability to build consensus and working relationships across organizations with differing levels of technical maturity and resources.
Knowledge of federal and New Hampshire student data privacy laws and standards (e.g., FERPA and RSA 189: 68) preferred.
Skill in translating statewide policy and standards into practical, actionable guidance for local education agencies.
AFTER-HIRE REQUIREMENTS:
None.
CAREER ADVANCEMENT OPPORTUNITIES:
In-Band Advancement Available: • Yes ☒ No
Criteria: Not Applicable.
Broad Group Level Advancement Available: • Yes ☒ No
Criteria: Not Applicable.
DISCLAIMERS:
The supplemental job description lists the essential functions of the position and is not intended to include every job duty and responsibility specific to the position. An employee may be required to perform other related duties not listed on the supplemental job description provided that such duties are characteristic of that job title.
When applicable, the work of an employee in trainee status in this position shall be overseen by a fully qualified individual. An employee in trainee status shall meet the minimum qualifications within the period of time specified on the SJD, not to exceed one year of being hired into this position.
RESPONSIBILITIES:
Provide security situational awareness notifications; statewide incident response updates; status of agency requests; and recommendations to strengthen statewide security posture to Agency teams.
Provide notification of priority incident response resource requirements; escalate remediation prioritization; provide security assessment of products, solutions, and contracts; provide situational awareness and security updates that impact multi-organizational units.
When designated, lead and oversee the DoIT Security Incident Response Team(s) to complete security tasks and initiatives; direct members engaged in incident response activities; report status of assigned actions and remediation efforts.
Serve as a POC within the Office of the Chief Information Security Officer (CISO) for State Agency Leadership requests for information, actions, and security reviews. Consult with Agency Leads for Agency engagements with external entities that have a cyber or information security component.
Provide information required for various audit efforts as part of the DoIT Team lead by the Compliance Team. As necessary, review vendor security assessments; and coordinate with vendors on findings and recommendations to determine compensatory actions and a "way to yes."
Serve as Primary Liaison with Department of Safety Information Analysis Center. Enable effective cyber threat and information security information sharing across State Agencies and when assigned, along with the CISO, act as the Emergency Support Function (ESF) -17 Lead under the Statewide Emergency Operations Plan for Major Incident Responses.
Serve as the primary security point of contact for the New Hampshire Department of Education (NHED), providing guidance on secure software development, cloud security architecture, and on-premises security architecture applicable to Department systems and initiatives.
Monitor emerging risks, technologies, and regulatory changes affecting student data privacy, and recommend updates to the Student Data Privacy Minimum Standards to the CISO and Department leadership.
Establish and maintain direct working relationships with school districts, schools, and other K-12 education stakeholders - including education technology vendors and state education associations - to advance the adoption of security and student data privacy practices statewide.
Use Artificial Intelligence (AI) to improve security processes and the State's security posture.
For further information please contact Pam McLeod, Chief Information Security Officer, [redacted], [redacted].
*TOTAL COMPENSATION INFORMATION
The State of NH total compensation package features an outstanding set of employee benefits, including:
HMO or POS Medical and Prescription Drug Benefits:
The actual value of State-paid health benefits and the amount of employee health benefit contributions may vary depending on the type of plan selected and the bargaining unit with which a position is associated.
See this link for details on State-paid health benefits:
https://www.das.nh.gov/hr/benefits.aspx
Value of State's share of Employee's Retirement: 12.87% of pay
Other Benefits:
*Dental Plan at minimal cost for employees and their families ($500-$1800 value)
* Flexible Spending healthcare and childcare reimbursement accounts
*State defined benefit retirement plan and Deferred Compensation 457(b) plan
*Work/life balance flexible schedules, paid holidays and generous leave plan
*$50,000 state-paid life insurance plus additional low-cost group life insurance
*Incentive-based Wellness Program (ability to earn up to $500)
Total Compensation Statement Worksheet:
https://www.das.nh.gov/jobsearch/compensation-calculator.aspx
Want the specifics? Explore the Benefits of State Employment on our website:
https://www.das.nh.gov/hr/documents/BenefitBrochure.pdf
https://www.das.nh.gov/hr/index.aspx
