Information Security Officer (ISO) in Richmond, VA
Core
Provide dedicated cybersecurity leadership to the Commonwealth of Virginia (COV) to implement, manage, and govern information security programs protecting state systems and data.
Role type
Senior IC Information Security Officer (ISO)
Builds
Statewide security compliance, risk management frameworks, and incident response capabilities for COV agencies.
Domain
Public Sector / Government / Cybersecurity
Required skills
NIST frameworks (800-53, 800-37, CSF), Virginia security standards (SEC 501, 525, 527, 530), Zero Trust architecture, risk assessment, incident response coordination, System Security Plans (SSP), Business Impact Assessments (BIA), policy development, audit support, cloud security, encryption, identity management.
Preferred skills
CISM, CISA, CRISC, GIAC certifications (GSEC, GCIH, GSTRT), AWS/Azure cloud security.
Technologies
NIST CSF, Zero Trust, AWS, Azure, SOC tools, encryption protocols.
Responsibilities
Serve as functional lead for security professionals and key contact for client CISO team; conduct enterprise risk assessments and develop System Security Plans; coordinate incident response and investigations with client SOC and Fusion Center; support audits and compliance reviews with COV standards; evaluate IT solutions and cloud services for security compliance; contribute to enterprise cybersecurity strategy and governance boards.
Seniority
Senior, hands-on IC with strategic leadership
