Information Security Officer, Affiliate Technology Services

ABOUT THE JOB The ACLU seeks applicants for the full‑time position of Information Security Officer, Affiliate Technology Services in the Information Security team of the ACLU’s National office in New York, NY or Washington, D.C. This is a hybrid role that has in‑office requirements of two (2) days per week or eight (8) days per month. This role will lead security posture management across the ACLU’s technology‑consolidated affiliates while providing advisory security support to non‑consolidated affiliates operating independently. This position sits at the intersection of security governance, affiliate technology services, and operational risk. You will partner closely with the IT PMO for Affiliate Technology Services to embed security into affiliate‑facing programs and will independently own and manage the Affiliate Security Champion Program to scale security awareness, baseline controls, and engagement across the affiliate network. This position is part of a collective bargaining unit. It is represented by ACLU Staff United (ASU). WHAT YOU’LL DO The Information Security Officer will serve as a trusted security advisor to the affiliate technology leaders, executives, and national stakeholders—helping balance enterprise security expectations with the operational realities of a federated organization. YOUR DAY TO DAY Own and advance the security posture of ACLU consolidated affiliates, including baseline controls, risk visibility, and remediation coordination. Provide structured security advisory services to non‑consolidated affiliates, tailored to varying maturity levels and resource constraints. Partner with the IT PMO for Affiliate Technology Services to ensure security requirements are embedded into affiliate technology planning, delivery, and sustenance. Lead and manage the Affiliate Security Champion Program, including recruitment, training, engagement, and ongoing coordination. Conduct affiliate security assessments and risk reviews, translating findings into actionable recommendations. Serve as the primary security point of contact for affiliate‑facing initiatives, incidents, and escalations. Support affiliate incident preparedness, response coordination, and post‑incident improvement efforts. Develop guidance, standards, and scalable security practices appropriate for affiliate environments. Track and report affiliate security risk trends to national leadership. FUTURE ACLU’ERS WILL Be committed to advancing the mission of the ACLU Center and embed the principles of equity, inclusion and belonging in their work by demonstrating commitment to diversity with an approach that respects and values multiple perspectives Be committed to work collaboratively and respectfully toward resolving obstacles and conflicts WHAT YOU’LL BRING Demonstrated experience in information security, risk management, or security governance. Experience working in federated, multi‑entity, or decentralized organizations. Strong understanding of security controls, identity, cloud/SaaS risk, and incident response fundamentals. Ability to translate complex security concepts into practical guidance for non‑specialist audiences. Excellent cross‑organizational communication and relationship‑building skills. Relevant certifications (e.g., CISSP, CISM) preferred but not required. COMPENSATION The ACLU is committed to equity, transparency, and clarity in pay. Consistent with our compensation philosophy, there is a set salary for each role based on geographic work location. The annual salary for this position is $167,568 (Level E), reflecting the salary of a position based in New York, NY. Salaries are subject to a regional pay adjustment if authorization is granted to work outside of the location listed in this posting. BENEFITS At the ACLU, we offer a broad range of benefits, which include: Time away to focus on the things that matter with a generous paid time‑off policy Focus on your well‑being with comprehensive healthcare benefits (including medical, dental and vision coverage, parental leave, gender affirming care & fertility treatment) Plan for your retirement with 401(k) plan and employer match We support employee growth and development through annual professional development funds, internal professional development programs and workshops OUR COMMITMENT TO ACCESSIBILITY, EQUITY, DIVERSITY & INCLUSION Accessibility, equity, diversity and inclusion are core values of the ACLU and central to our work to advance liberty, equality, and justice for all. For us diversity, equity, accessibility, and inclusion are not just check‑the‑box activities, but a chance for us to make long‑term meaningful change. We are a community committed to learning and growth, humility and grace, transparency and accountability. We believe in a collective responsibility to create a culture of belonging for all people within our organization – one that respects and embraces difference; treats everyone equitably; and empowers our colleagues to do the best work possible. We are as committed to anti‑oppression, anti‑ableism, and anti‑racism internally as we are externally. Because whether we’re in the courts or in the office, we believe ‘We the People’ means all of us. With this commitment in mind, we strongly encourage applications from all qualified individuals without regard to race, color, religion, gender, sexual orientation, gender identity or expression, age, national origin, marital status, citizenship, disability, veteran status and record of arrest or conviction, or any other characteristic protected by applicable law. The Department of Education has determined that employment in this position at the ACLU does not qualify for the Public Service Loan Forgiveness Program. #J-18808-Ljbffr