Information Security Officer

Information Security Officer (ISO)Lake County Government is seeking an Information Security Officer (ISO) with a track record of implementing security best practices at the enterprise level. This position will be responsible for developing, implementing, and directing a comprehensive information technology security and privacy program. The ISO is responsible for developing and monitoring practices to ensure that Lake County's information systems are physically secure and available to authorized users and is responsible for executive guidance within IT risk management and the overall security posture of the organization. This position will continually prevent, identify, and mitigate security threats and vulnerabilities in Lake County's systems while assessing the amount of risk present and the cost and value of implementing controls and preventative measures. The ISO is responsible for promoting security awareness in the organization and ensuring compliance with statutory and regulatory requirements regarding information access, security, and privacy.Essential Functions:Develop, implement, and maintain procedures and practices to ensure a high level of security for Lake County's information systems and assets.Develop, maintain and enhance Incident and Response procedures to address security incidences (breaches); respond to alleged violations and/or complaints.Coordinate the development and delivery of security awareness programs.Participate in Disaster/Recovery planning and testing.Conduct and coordinate security audits.Develop and implement an ongoing risk assessment program targeting information security; recommend methods for vulnerability detection and remediation, and oversee vulnerability and penetration testing to ensure the integrity, confidentiality and availability of information.Provide and present the latest legislation, regulation, advisories, alerts and vulnerabilities pertaining to Lake County's security and privacy.Ensure that security programs are in compliance with relevant laws, regulations and policies to minimize or eliminate risk and audit findings.Manage regulatory and FOIA requests.Lead IT strategy planning activities, bringing a current knowledge and future vision of security best practices.Create, communicate and implement a process for vendor risk management.Create and manage information security and risk management awareness training programs for all employees, contractors and approved system users.Work cross-departmentally to facilitate IT risk assessment and risk management processes.Provide strategic risk guidance for IT projects, including the evaluation and recommendation of technical controls.Knowledge Skills Abilities and Education Required:Excellent verbal and written communication skills and the ability to interact professionally with a diverse group of executives, managers, and subject matter experts8+ years in a technology leadership position with at least 5 years in information security5+ years of experience leading complex, enterprise-wide security projects5+ years of experience implementing or administering common information security management frameworks such as ITIL, COBIT or NIST and leading organizations through SOX, HIPAA, PCI or CJIS compliance effortsEducation and/or Other Requirements:Bachelor's degree in technology or closely related discipline desiredOne or more of the following certifications preferred: CISSP, CISM, CISA or similarPhysical Requirements:Requires mainly office work, involving standing or walking some of the time, exerting up to 10 pounds of force on a regular basis, and high dexterity in operating office equipment, including a keyboard, phone, copier, etc.The position requires normal visual acuity and field of vision and the ability to hear and speak to understand, respond to and build relationships with a diverse clientele.Supplemental Information:Lake County offers a competitive salary and benefit package. We also offer flexible working hours, and a comprehensive wellness and training program. Visit our Prospective Employee page to get additional information on why you should work for Lake County! Any offer of employment is contingent upon the successful completion of a background screening, drug testing, and may include a pre-employment medical exam.Lake County is committed to being a diverse and inclusive workplace and is proud to be an Equal Opportunity Employer.