Kris Allgary has served as the commission’s CISO since May 2024. He was an information security manager for the agency for two years until accepting his most recent post.
Now, the agency is advertising for candidates for his position, stating:
“This position is responsible for developing and implementing an information security program, which includes procedures and policies designed to protect enterprise communications, systems and assets from both internal and external threats,” the posting reads.
The incumbent would also maintain and enforce the agency’s information security policies and design and maintain all network infrastructure.
Additional duties include:
- Developing, implementing and monitoring a strategic, comprehensive enterprise information security and IT risk management program
- Assisting resource owners and IT staff in understanding and responding to security audit failures reported by auditors
- Ensuring audit trails, system logs and other monitoring data sources are reviewed periodically and following policies and audit requirements
- Designing, coordinating and overseeing security testing procedures to verify the security of systems, networks and applications and managing the remediation of identified risks
- Developing and enhancing an information security management framework
The yearly salary range for the CISO role is $90,000 to $103,000, and the application deadline is Feb. 28.
This would be the commission’s second C-suite job opening after former CIO Susan Whitmire announced her retirement last month.
The duty statement for the chief information officer position states that the CIO will head up the commission’s IT section and ensure its strategy and goals are achieved in division support, strategy, IT leadership, team development and IT operations.
Other specific job duties include:
- Proactively advising the senior management team on emerging technologies and digital trends most relevant to the commission’s goals and evolving needs
- Developing an IT vision based on the direction provided by leadership, creating a strategy and a road map and leading the IT team and its business partners in effective execution
- Promoting a “what’s best for the agency” mentality at all levels of the IT organization
- Protecting the commission’s data and IT systems from cyber threats
- Implementing cybersecurity measures and a robust response plan