Information Security Officer

Information Security Officer

Job no:
Work type: Full-Time (Salaried)
Location: Henrico, Virginia
Categories: Information Technology, Data Analysis

Title: Information Security Officer

State Role Title: Info Technology Specialist III

Hiring Range: $110,000 - $130,000

Pay Band: 6

Agency: Dept of Prof & Occup Reg

Location: DPOR Main Office

Agency Website: www.dpor.virginia.gov

Recruitment Type: General Public - G

Job Duties

This position provides leadership and oversight for the agency's information security and risk management program, ensuring compliance with Commonwealth of Virginia information security standards and alignment with evolving cybersecurity best practices.

The incumbent is responsible for protecting DPOR's information systems, applications, networks, data, and other technology assets from security threats and vulnerabilities. This role is essential to maintaining the confidentiality, integrity, and availability of agency information resources and supporting the agency's overall mission and operations.

This position is not eligible for sponsorship or F-1 (I-983 (STEM OPT Training Plan) STEM OPT STUDENTS).

This position is not a full-time telework position. Upon hire into this position, the agency requires the incumbent to be in the position for 90 days before a specific telework schedule may be submitted for consideration.

Minimum Qualifications

• Significant experience serving as an Information Security Officer (ISO), IT Security Analyst, or in progressively responsible information security roles.
• Demonstrated leadership experience in large, complex IT environments, with increasing levels of responsibility.
• Extensive experience developing, implementing, and managing comprehensive information security programs, including governance, risk management, compliance, and security operations.
• Extensive knowledge of information security architecture, cybersecurity frameworks, and security control implementation.
• Extensive experience in cybersecurity incident management, response, recovery, and remediation.
• Extensive experience with enterprise technology environments, including systems, networks, applications, and security tools.
• Comprehensive knowledge of federal and state laws, regulations, policies, and security standards, including the Commonwealth of Virginia's SEC-530 Information Security Standard.
• Extensive experience developing, implementing, and maintaining information security policies, standards, procedures, and governance frameworks.
• Experience with strategic planning, program development, and long-term security initiatives.
• Experience developing, testing, and maintaining disaster recovery and business continuity plans to ensure operational resilience.
• Demonstrated ability to think critically, analytically, and strategically, while proactively identifying and addressing risks and challenges.
• Strong ability to analyze complex issues, evaluate alternatives, and develop effective, practical solutions.
• Ability to identify, assess, and mitigate security, operational, and compliance risks.
• Ability to monitor systems, processes, and practices for compliance with applicable policies, standards, regulations, and security requirements
• Ability to conduct cost-benefit analyses and provide recommendations that support sound business and security decisions.
• Ability to analyze and interpret information from multiple sources and develop recommendations that improve operational effectiveness, security, and risk management.
• Strong organizational skills, including the ability to prepare, maintain, and manage accurate documentation, detailed records, and comprehensive reports.
• Excellent verbal and written communication skills, with the ability to effectively communicate technical and non-technical information to staff, leadership, and external stakeholders.
• Demonstrated ability to collaborate effectively with leadership, peers, and stakeholders and to influence the adoption of information security policies, standards, and best practices.

Additional Considerations

• Currently holds at least one of the following industry-recognized information security certifications: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), or Certified in Risk and Information Systems Control (CRISC).
• Working experience with Splunk.

Special Instructions

CONFIRMATION: You will be provided with a confirmation of receipt when your application and/or résumé is submitted successfully. Please refer to "Your Application" in your account to check the status of your application for this position.

LAYOFF POLICY: If you have been affected by DHRM Policy 1.3 Layoff and possess a valid Interagency Placement Screening Form (Yellow Card) or a Preferential Hiring Form (Blue Card), you must submit a copy of the card by attaching it to your submitted application, or you may send it to personnel@dpor.virginia.gov, or via fax to (833) 654-4240, before the job posting closes.

ALTERNATIVE HIRING PROCESS: In support of the Commonwealth's commitment to inclusion, we are encouraging individuals with disabilities to apply through the Commonwealth Alternative Hiring Process. To be considered for this opportunity, applicants will need to provide their AHP Letter (formerly COD) provided by the Department for Aging & Rehabilitative Services (DARS) or the Department for the Blind & Vision Impaired (DBVI). Service-Connected Veterans are encouraged to answer Veteran status questions and submit their disability documentation, if applicable, to DARS/DBVI to get their AHP Letter. Requesting an AHP Letter can be found at AHP Letter or by calling DARS at 800-552-5019.

ELECTRONIC APPLICATIONS OR RESUMES ONLY: DPOR does not accept mailed, emailed, faxed, or hand-delivered applications or resumes.

BACKGROUND INVESTIGATIONS: Final candidates are subject to a background investigation. The investigation may include local agency checks, criminal record checks, driving record checks, employment verification, verification of education, and other checks requested by the hiring authority related to the position. Please be advised that if the information gathered does not coincide with the information listed on your application, your application will no longer be considered for the position.

LICENSES: Applicants must disclose any current professional or occupational registration, certification, and license(s) held by DPOR. Applicants with an active license issued by the Department of Professional and Occupational Regulation (DPOR) may be required to place their license in an inactive status while employed with the agency. Additional information may be provided by the Human Resources Office.

Contact Information

Name: Human Resources

Phone: 804-367-8500

Email: hr@dpor.virginia.gov

Note: Applicants who received a Certificate of Disability from DARS or DBVI dated between April 1, 2022- February 29, 2024, can still use that COD as applicable documentation for the Alternative Hiring Process.

Advertised: 13 Nov 2026 Eastern Standard Time
Applications close: 29 Nov 2026 Eastern Standard Time

Whatsapp Facebook LinkedIn Email App