The CISO oversees the formulation, oversight and administration of the SCO’s Enterprise Information Security Program’s standards, procedures, guidelines, safeguards, initiatives and processes. The incumbent “ensures a systematic, disciplined approach to evaluating and improving the effectiveness of information security risk and internal control management, security assurance, statutory compliance and governance at the SCO,” the job posting says. “The incumbent will also be responsible for developing policy and strategic plans, establishing strategic goals and longer-range planning, and determining new enterprise-wide direction and policy decisions.”
Applicants must complete a Statement of Qualifications, addressing these points:
- Describe how you would align a cybersecurity strategy with the unique and specific needs of the SCO. Include an example of how you have previously aligned technology security with organizational strategy in a government or similarly complex setting.
- Describe your approach to managing cybersecurity risks in a government entity operating with constitutional independence or similarly complex setting. How would you balance robust security measures with regulatory compliance and operational efficiency?
- Provide an example of a significant cybersecurity incident you managed in a government or large organizational setting. How did you lead the response, and what strategic decisions did you make to mitigate the impact and prevent future occurrences?
More information about the position can be found in the duty statement. The role has a monthly salary of $10,421 to $12,668, and the application deadline is Dec. 1.