Information and Security OfficerJob no: Work type: Full-Time (Salaried)
Location: Henrico, Virginia
Categories: Information Technology
Title: Information and Security Officer
State Role Title: Salary Non-Specified
Hiring Range: Hiring range for this position is $116,077.60 - $133,489.24, commensurate with education and experience
Pay Band: UG
Agency: VA Cannabis Control Authority
Location: VA Cannabis Control Authority
Agency Website: https://cca.virginia.gov/
Recruitment Type: General Public - G
Job DutiesProgram Leadership- Leads the Virginia Cannabis Control Authority cybersecurity program in support of program and administrative information systems and technology.
Policy, Compliance and Audit- Develops and maintains cybersecurity policies and standards for Authority information technology infrastructure and data.
- Implements and maintains one or more risk management frameworks in order to protect all information technology infrastructure and assets from external and internal threats.
- Ensures CCA cybersecurity compliance and serves as a key point of contact with Authority affiliated audit and compliance personnel.
- Maintains and reviews commercial and governmental IT policies, standards and guidelines, ensuring the Authority follows established best practices.
Security Awareness and Training- Oversees the information security training program for Authority employees and manages ongoing security awareness and role-based security training.
Risk Management, Security Operations, Projects, and Incident Response- Manages IT security operations, overseeing cybersecurity monitoring, detection, and management platforms. Identifies risks and vulnerabilities, engaging with stakeholders in security responses.
- Participates in the Authority Change Management process and evaluates changes for security risks.
- Assists in the development of a comprehensive continuity of operations and disaster recovery plans.
- Manages crisis situations, which may involve complex information security issues and leads events through completion including overseeing and reporting all forensic activity.
- Develop and maintain very positive and professional customer service and/or relations within the Authority and with all constituencies to include citizens, patients, practitioners, licensees, and contractors. Demonstrates a positive and professional attitude and treats everyone with dignity and respect.
- Safety issues are reviewed and communicated to ensure a safe and healthy workplace and a reduction in work-related absence.
Other duties as assigned- Follow workplace safety regulations and adhere to applicable standards, processes, and programs established for your position.
- Report unsafe work conditions to your supervisor.
- Immediately report work-related incidents to your supervisor and participate in accident investigation requests.
Minimum Qualifications- Possesses working knowledge of all areas within the IT department including information security, systems, network infrastructure, identity management, application development, and endpoint security.
- Significant knowledge and awareness of security trends, legislation, and policy.
- Comprehensive knowledge of current information security threats, weaknesses and vulnerabilities and good working knowledge of zero-day exploits.
- Ability produce and manage IT security corrective action plans.
- Demonstrated ability to model professional integrity and behavior.
- Excellent organization and planning skills.
- Superior communication skills, including the ability to write complex technical documentation for varied audiences
Required Education and Experience- Master's Degree or a Bachelor's Degree, or equivalent combination of education and professional experience.
- Experience building and maintaining information security programs.
- In-depth experience participating in incident response planning and security breach investigations.
- Demonstrated experience delivering security awareness and training programs.
- Experience evaluating, administering and executing enterprise security programs
Additional ConsiderationsPreferred (Optional) Education and Experience- Experience leading, supervising, and facilitating state government technical security teams.
- Familiarity with continuity of operations, business impact analysis, disaster recovery, and risk management frameworks.
- Experience serving as incident commander during information security incidents.
Special InstructionsYou will be provided a confirmation of receipt when your application and/or résumé is submitted successfully. Please refer to "Your Application" in your account to check the status of your application for this position.
Contact InformationName: VCCA Recruitment Team
Phone: 804-653-9735
Email:
[email protected] 
