Ryan Tolia has served as the agency’s CISO since August 2023. Before that, Tolia was the department's deputy CISO.
He also held various IT-related roles with the Florida Department of Transportation for six years, including serving as an enterprise infrastructure architect, cloud resource analyst, resource services analyst, messaging administrator and application support specialist.
However, the department published a job posting for the role, listing the position as an anticipated vacancy.
“The CISO is responsible for designing, implementing and maintaining FloridaCommerce’s cybersecurity activities,” the job posting states.
The CISO will also work closely with the department’s chief information officer and other IT leadership staff to establish cybersecurity operations and coordinate the strategic direction of all information security and assurance efforts.
Other responsibilities, according to the job posting, include the following:
- Establishing, maintaining and the continuing development of strategic information security plans and associated operational information security plans
- Coordinating common security operations center functions, including threat prevention, monitoring and response
- Coordinating the agency’s Computer Security Incident Response Team (CSIRT) and maintaining its incident response plan
- Overseeing incident response planning as well as the investigation of security breaches and assisting with disciplinary and legal matters associated with such breaches
- Assisting in information technology disaster recovery planning in support of the agency’s continuity of operations plan and IT contingency planning
More details can be found in the job’s duty statement. The position has a yearly salary range of $100,000 to $120,000, and the application deadline is Aug. 2.
*Industry Insider — Florida reached out to the Florida Department of Commerce for comment but did not get a response.