Salary: $150,000.00 - $200,000.00 Annually
Location : Thurston County - Olympia, WA
Job Type: Exempt
Remote Employment: Flexible/Hybrid
Job Number:
Department: Washington Technology Solutions
Division: OCS
Opening Date: 07/23/2026
Closing Date: 8/9/2026 11:59 PM Pacific

Description
State Chief Information Security Officer

About the position

The State Chief Information Security Officer (CISO) leads Washington's cybersecurity strategy as the highest authority in the Office of Cybersecurity (OCS), and is accountable for enterprise risk management, strategic investment decisions and cross-agency cybersecurity posture. The State CISO leads OCS in enforcing standards, managing incident responses and auditing compliance with security protocols. As a trusted senior advisor to the Governor, Legislature, and state executive branch leadership, the State CISO provides expert counsel on cybersecurity policies, incident impacts, mitigation strategies and legislative initiatives to protect the state's critical infrastructure and digital assets. This role reports directly to the State Chief Information Officer (CIO).

Duties
Some of what to expect in this role:

• Provide executive oversight of Deputy CISOs, ensuring their sections align with the statewide cybersecurity vision, enterprise priorities and statutory responsibilities.
• Define enterprise cybersecurity risk tolerance, review statewide risk posture reports from Deputy CISOs, and directs cross-agency mitigation strategies.
• Provide oversight of federal, state, and other audits and reviews for agencies.
• Serve on governance committees and represent Washington's cybersecurity interests publicly.
• Collaborate with agency leaders, private sector and federal partners to improve statewide cybersecurity resilience and awareness.
• Develop and implement strategic plans and goals for the state of Washington and the OCS in alignment with the vision and mission of the state's information technology strategic plan.
• Oversee the development of cybersecurity workforce role definitions, skills matrices and career progression pathways.
• Manage OCS's budget, resources, staff, vendors and projects, ensuring efficiency, quality, and alignment with statewide and WaTech goals, policies and standards.
• Retain executive oversight of the state's Information Security Program, delegating day-to-day development and implementation to Deputy CISOs across their respective domains.
• Participate with the responsible, interested parties in developing and implementing statewide business continuity and disaster recovery plans to ensure that these incorporate appropriate cybersecurity measures.
• Ensure proper inventories of information technology assets and software licenses in collaboration with information technology operations.
• Develop and maintain an enterprise cybersecurity performance framework using leading standards (e.g., NIST CSF, CMMI, CIS Controls) to assess maturity, measure outcomes, and guide investment decisions.

Qualifications
Here's what we're looking for:

• Fifteen years of experience in the field of information technology. This experience must include:
  • Ten years of recent experience in information security at the enterprise or corporate level.
  • Four years of supervisory experience leading technical and information security teams.
  • Three years of experience with:
    • Budget development, implementation and financial forecasting of business technology services.
    • Developing and implementing policies and standards in a large enterprise environment.
    • Assessing security threats and recommending appropriate mitigation strategies and compensating controls.
    • Identifying security solutions that meet predefined regulatory/compliance requirements.

* A bachelor's or master's degree in computer science, business administration, information security, or a related field may substitute for four or six years, respectively, of the overall 15 years of experience required.

• The ability to take action to learn and grow.
• The ability to take action to meet the needs of others.
• Strong understanding of relevant laws, regulations and compliance requirements with experience analyzing and interpreting legislation and administrative rules to assess their impact on IT security policy and standards implementation.
• Proven ability to convey complex technical issues effectively to technical teams, customer security professionals and non-technical senior management.
• In-depth knowledge of cybersecurity principles, technologies and industry best practices.
• In-depth knowledge of cutting-edge cybersecurity technologies such as cryptography, artificial intelligence for threat detection, and blockchain for secure data management. Experience implementing and innovating in zero-trust architecture, secure DevOps, and advanced threat intelligence.
• Proven expertise in developing budgets, implementing financial plans and forecasting for information technology services.
• Proven expertise in negotiating and overseeing third-party vendor contracts.

Preference may be granted to applicants with the following:

• A master's degree in computer science, business administration, information security, or a related field.
• Applicable industry-accepted certifications, including but not limited to:
  • Certified Information Systems Security Professional (CISSP).
  • Holistic Information Security Practitioner (HISP).
  • Certified Information Security Manager (CISM).
  • Certified Information Systems Auditor (CISA).
  • Certified in Risk and Information Systems Controls (CRISC).
• Department of Homeland Security (DHS) secret-level clearance.
• Ability to speak effectively and persuasively before a large audience.
• Demonstrated experience in project management, including managing multiple projects with strong organizational and time-management skills.
• Demonstrated commitment to continuous learning and professional development, such as participation in professional organizations (e.g., ISACA, ISC2) and attendance at industry conferences.

Supplemental Information
Telework:

This position is authorized for telework; however, the incumbent will be required to report to WaTech's Olympia, Washington office two to three days per week, as well as for any security-related meetings, incidents or design sessions. The incumbent must reside within a 60-mile radius of our Olympia, Washington office. Should the selected candidate reside outside this radius, they will be required to commit to relocating within the designated area within an approved timeframe.
What WaTech offers:

As an employee of WaTech, you'll have access to an outstanding that includes medical and dental plan options for you and your family, paid leave and holidays, retirement plan options and more.
While WaTech is headquartered in Olympia, Washington, which is near some of the country's most , we are able to offer many of our positions telework and flexible schedule options to help support a healthy work-life balance.
Additional information about this role:

• This position requires a background check. Information from the background check will not necessarily preclude employment but will be considered in determining the applicant's suitability to perform in the position and is a continued condition of employment.

How to apply:

Applications for this recruitment will be accepted electronically. Please select the large "apply" button at the top of this announcement. In addition to completing your online application, please also include the following attachments:

• A current resume detailing your applicable experience, training and/or education.
• A letter of interest highlighting how your experience aligns with the outlined job posting.

Top candidates will be asked to provide a list of their professional references with contact information.
Reminders:

• A real person is reviewing your application material. It is in your best interest to complete the application in its entirety and review thoroughly before submitting. You will not be eligible to re-apply for this posting for 30 days.
• Applications with missing or incomplete fields, or supplemental question responses such as "see resume" may be considered incomplete and removed from consideration.

By submitting your materials, you affirm that all information is true and correct. Any untruthful information is cause for removal from the applicant pool. If hired as a result of this recruitment, the discovery of incorrect or falsified information may lead to disciplinary action or dismissal.
Recruitment process:

The first round of application assessments will be conducted seven days after the initial job posting date. The hiring authority reserves the right to offer the position at any time after the initial seven-day job posting date. It is to the applicant's advantage to apply as early as possible. There will be an assignment as a part of the assessment process.
The salary range reflected above reflects the full potential for this position. The base pay offered to the selected candidate will consider the candidate's specific qualifying experience and internal equity of the existing team.
Contact us: For inquiries about this position, please contact Rebekah Wilkes at (360) 407-8646 or email to
If you'd like to request an accommodation for any part of the selection process, or to receive the application material in an alternate format, please contact Human Resources at (360) 407-8242 or .Persons of disability or those who are deaf or hard of hearing can call the Washington Relay Service by dialing 7-1-1 or 1-800-833-6388.
More than Just a Paycheck!
Employee benefits are not just about the kind of services you get, they are also about how much you may have to pay out of pocket. Washington State offers one of the most competitive benefits packages in the nation.

We understand that your life revolves around more than just your career. Like everyone, your first priority is ensuring that you and your family will maintain health and financial security. That's why choice is a key component of our benefits package. We have a selection of health and retirement plans, paid leave, staff training and other compensation benefits that you can mix and match to meet your current and future needs.

Read about our benefits:
The following information describes typical benefits available for full-time employees who are expected to work more than six months. Actual benefits may vary by appointment type or be prorated for other than full-time work (e.g. part-time); view the job posting for benefits details for job types other than full-time.

Note: If the position offers benefits which differ from the following, the job posting should include the specific benefits.

Insurance Benefits
Employees and their families are covered by medical (including vision), dental and basic life insurance. There are multiple medical plans with affordable monthly premiums that offer coverage throughout the state.

Staff are eligible to enroll each year in a medical flexible spending account which enables them to use tax-deferred dollars toward their health care expenses. Employees are also covered by basic life and long-term disability insurance, with the option to purchase additional coverage amounts.

To view premium rates, coverage choice in your area and how to enroll, please visit the Public Employees Benefits Board (PEBB) website. The Washington Wellness program from the Health Care Authority works with PEBB to support our workplace wellness programs.

Dependent care assistance allows the employee to save pre-tax dollars for a child or elder care expenses.

Other insurance coverage for auto, boat, home, and renter insurance is available through payroll deduction.

The Washington State Employee Assistance Program promotes the health and well-being of employees.

Retirement and Deferred Compensation
State Employees are members of the Washington Public Employees' Retirement System (PERS). New employee