Information Technology Security Officer

Role : Information Technology Security Officer

Location : Jackson, MS - Onsite in MS a minimum of 1 week per month plus during an emergency defined by the State Health Office or as negotiated between the contractor and the agency.

Contract position

Required Skills / Experience

Provide the minimum required skills and / or experience the contractor must possess to qualify for this position. These

requirements will be transferred to the Score Sheet and candidates without these requirements reflected on their resume will

NOT be presented to the manager for consideration.

• Minimum of 5 years’ experience cybersecurity, including 2+ years in leadership

Must be a Certified Information Security Manager (CISM) or a Certified Information Systems Security Professional

(CISSP)

EDR / XDR, Microsoft Defender 365, Supply Chain Monitoring, and SIEM / SOAR

Position Description and Job Skill Set

Description of the job functions the contractor will be expected to perform.

Under 45 CFR §164.308, as a covered entity under the Health Insurance Portability and Accountability Act of 1996

(HIPAA), MSDH is required to identify a Security Officer responsible for the development and implementation of policies

and procedures to ensure the integrity of electronic Protected Health Information (ePHI) created, transmitted, received

and / or stored by the agency. This individual, designated as the IT Security Officer (ITSO), also is required by the state

Department of Information Technology Services (ITS) under Rule 1.6 of the ITS Enterprise Security Policy. Under this

rule, the ITSO is responsible for :

security software and hardware.

Preferred / Not Required

Provide any skills / experience that would be helpful for the candidate to possess but not required. Examples : Previous supervisory

experience, WebLogic experience helpful, etc.

Governmental data modernization or project management experience

AI / ML development experience in cybersecurity initiatives (next-generation firewalls, threat hunting, cyber risk, etc).