State Chief Information Security Officer

Salary: $150,000 - 200,000 per year
Requirements:
We require 15 years of information technology experience, including 10 recent years in enterprise or corporate information security, 4 years leading technical and security teams, and 3 years in budget development, financial forecasting, policy and standards implementation, threat assessment, mitigation planning, and selecting compliant security solutions. A bachelors degree in computer science, business administration, information security, or a related discipline may replace 4 years of the overall experience requirement; a masters degree may replace 6 years. We are looking for candidates with a strong commitment to learning and service, along with a solid grasp of laws, regulations, and compliance requirements affecting IT security policy. We need the ability to explain complex technical matters clearly to technical staff, security professionals, and senior leaders. We expect deep knowledge of cybersecurity principles, technologies, and industry-leading practices. We value experience with advanced security capabilities such as cryptography, AI-based threat detection, blockchain for data protection, zero-trust architecture, secure DevOps, and threat intelligence. We seek proven expertise in budgeting, financial planning, and forecasting for technology services. We also value demonstrated skill in negotiating and managing third-party vendor contracts. Preference may be given to candidates with a masters degree in a related field, industry certifications such as CISSP, HISP, CISM, CISA, or CRISC, DHS secret-level clearance, strong public speaking skills, project management experience, and ongoing professional development. Candidates must be able to live within 60 miles of our Olympia office or relocate within an approved timeframe.
Responsibilities:
We provide executive leadership to Deputy CISOs and ensure their work aligns with our statewide cybersecurity vision, enterprise priorities, and statutory duties. We define enterprise cybersecurity risk tolerance, review statewide risk reports, and direct cross-agency mitigation efforts. We oversee federal, state, and other audits and reviews for agencies. We represent Washingtons cybersecurity interests in governance settings and public forums. We collaborate with agency leaders, private-sector partners, and federal stakeholders to strengthen statewide cyber resilience and awareness. We develop and execute strategic plans and goals for the State of Washington and the Office of Cybersecurity in alignment with the state IT strategic plan. We guide workforce planning by shaping cybersecurity role definitions, skill matrices, and career pathways. We manage the Office of Cybersecurity budget, resources, staff, vendors, and projects to ensure efficiency, quality, and alignment with statewide goals, policies, and standards. We maintain executive oversight of the state Information Security Program while delegating day-to-day program development and implementation to Deputy CISOs. We support statewide business continuity and disaster recovery planning to ensure cybersecurity considerations are built in. We help ensure accurate inventories of IT assets and software licenses in partnership with IT operations. We build and maintain an enterprise cybersecurity performance framework using recognized standards such as NIST CSF, CMMI, and CIS Controls to measure maturity, outcomes, and investment decisions.
Technologies:
AI Blockchain Cryptography DevOps Support Security LESS Web
More:
We are Washington Technology Solutions (WaTech), the states technology organization supporting essential public services through secure, efficient, and resilient digital infrastructure. This role serves as the State Chief Information Security Officer and leads Washingtons cybersecurity strategy as the top authority in our Office of Cybersecurity, reporting to the State CIO. The position is based in Olympia, Washington, with flexible hybrid telework and a requirement to report to our Olympia office two to three days per week and for security-related meetings, incidents, or design sessions. We offer a competitive public-sector benefits package that includes medical and dental coverage, paid leave and holidays, retirement options, and flexible work arrangements, and we are committed to diversity, inclusion, and equal opportunity.
last updated 30 week of 2026