Chief Information Security Officer (Contract)

Chief Information Security Officer (Contract)

We continually strive for a workforce that reflects the growing diversity within the State of Illinois. A variety of employee backgrounds, perspectives, ideas and experiences are crucial to our ability to most effectively serve the public. Bilingual skills welcome.

The State of Illinois is committed to working with and providing reasonable accommodations to people with disabilities. Further, federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. To be provided a Reasonable Accommodation during the hiring process, you will need to provide a certification of disability from a physician, psychiatrist, school official or an Illinois Department of Human Services (DHS) Division of Rehabilitation Services (DRS) Vocational Rehabilitation (VR) Counselor. Supporting documentation should be uploaded under My Documents ? Additional Documents section for each application. Any questions on Reasonable Accommodations can be directed to Central Management Services Disability Resource Center at CMS.DisabilityResCen@illinois.gov or call (217) 524-7514 for further information and to request or discuss an accommodation.

The State of Illinois does not provide sponsorship for employment visa status (e.g. H-1B visa status), nor is the State able to provide extensions of optional practical training (OPT) under the STEM-designated degree program for F-1 students. To be considered for permanent employment with the State of Illinois, applicants must be currently authorized to work in the United States on a full-time basis.

In compliance with the Illinois Equal Pay Act, 820 ILCS 112/1 et seq., the State does not seek, request, or require a job applicant's wage or salary history. Employment decisions are not made based on an applicant's wage or salary history. To that end, please do not include wage or salary information in your resume or other profile or application materials.

Date: Sep 30, 2026 Location: Springfield, IL, US, 62702 Job Requisition ID: 58662 Opening Date: 09/30/2026 Closing Date: 10/13/2026 Agency: Department of Corrections Class Title: CONTRACTUAL WORKER - 10000 Skill Option: None Bilingual Option: None Salary: Hourly $76.00; up to $148,800 annually. Please Note: Former retired state employees will only be allowed to hire in at 80% of their base retirement Job Type: Hourly Category: Full Time Number of Vacancies: 1 Bargaining Unit Code: None Merit Comp Code: Exempt Work Hours: 8:00am - 4:30pm Anticipated Hybrid Work Schedule Availability: It is required that a person reports to the headquarters on this job position as necessary (could be weekly, monthly, or other schedule) dependent on operational need Headquarter Location: 1000 E Converse Ave, Springfield, Illinois, 62702 Work County: Sangamon Agency Contact: Lisa.Devert@illinois.gov

Why Work for Illinois? Working with the State of Illinois is a testament to the values of compassion, equity, and dedication that define our state. Whether you're helping to improve schools, protect our natural resources, or support families in need, you're part of something biggersomething that touches the lives of every person who calls Illinois home. No matter what state career you're looking for, we offer jobs that fit your life and your scheduleflexible jobs that provide the gold standard of benefits. Our employees can take advantage of various avenues to advance their careers and realize their dreams. Our top-tier benefits and great retirement packages can help you build a rewarding career and lasting future with the State of Illinois.

Essential Functions

• Serves as the Department's Chief Information Security Officer, leading the agency information security program in coordination with the Department of Innovation and Technology under the Department of Innovation and Technology Act (20 Illinois Compiled Statutes 1370) and the Data Security on State Computers Act (20 Illinois Compiled Statutes 450):
• Establishes, maintains, and enforces the Department's information security policies, standards, and procedures consistent with the Department of Innovation and Technology enterprise security framework, applicable National Institute of Standards and Technology standards, and the Federal Bureau of Investigation Criminal Justice Information Services Security Policy.
• Develops and administers the Department's information security risk management program, including periodic risk assessments, security control assessments, and plans of action and milestones.
• Provides administrative input into the development of Department information technology policies, standard operating procedures, and security-related directives.
• Assesses and evaluates the effectiveness of information security operations, policies, procedures, and internal controls, and drives continuous improvement based on assessment findings, audit results, and threat trends.
• Advises Department executive leadership on information security posture, emerging risks, and resource requirements.
• Serves as the Department's designated security official and Information Security Officer for regulated data, ensuring compliance with state and federal information protection requirements:
• Serves as the designated security official for protected health information under the Health Insurance Portability and Accountability Act Security Rule (45 Code of Federal Regulations 164.308(a)(2)) for the Department's electronic health record environment.
• Serves as the agency Information Security Officer for criminal justice information under the Federal Bureau of Investigation Criminal Justice Information Services Security Policy.
• Administers compliance with the Personal Information Protection Act (815 Illinois Compiled Statutes 530) and the Identity Protection Act (5 Illinois Compiled Statutes 179), including safeguards for personal information and Social Security numbers.
• Maintains the Department's data classification and data handling standards across the Microsoft 365 environment, the electronic health record system, the offender management system, and other systems of record.
• Coordinates information security obligations arising under the Freedom of Information Act and applicable records retention requirements with the Office of the General Counsel and the Department Freedom of Information Act Officer.
• In carrying out this designated security official role, implements and oversees the technical safeguards required to keep protected health information secure; prevents unauthorized access to protected health information through access controls, authentication, and audit controls; establishes and implements procedures for the secure transmission of electronic protected health information (ePHI), including encryption in transit; and determines and maintains requirements for the proper storage of ePHI, including encryption at rest and retention.
• Continues Directs the Department's security operations, incident response, and breach notification activities in coordination with the Department of Innovation and Technology:
• Establishes and maintains the Department's incident response plan and serves as the agency point of accountability for information security incidents.
• Coordinates detection, containment, investigation, and recovery activities with the Department of Innovation and Technology security operations and, where applicable, law enforcement.
• Administers breach notification determinations and timelines required under the Personal Information Protection Act (815 Illinois Compiled Statutes 530) and other applicable authorities.
• Oversees identity and access management, privileged access controls, and insider threat monitoring across Department systems and facilities.
• Governs the security of connected operational technology across Department facilities, including surveillance, access control, body worn camera, and related systems.
• Serves as the Department's information security lead for external audits, compliance reviews, and oversight inquiries:
• Serves as primary point of contact for the Office of the Auditor General, the Department of Innovation and Technology, Federal Bureau of Investigation Criminal Justice Information Services audits, internal audit, and other oversight bodies on information security matters.
• Coordinates the Department's information security audit response, including document production, walkthrough interviews, finding responses, and corrective action plans.
• Tracks open findings, management responses, and remediation status through closure.
• Prepares security briefing materials, attestations, and exhibits as needed.
• Plans, develops, and delivers information security training and awareness across the Department:
• Designs and conducts security awareness training for Department staff and role based training for staff handling criminal justice information, protected health information, and other sensitive data.
• Develops and maintains security reference materials, acceptable use guidance, and incident reporting procedures.
• Promotes a culture of security awareness and accountability across Department divisions and facilities.
• Performs other duties as required or assigned which are reasonably within the scope of the duties enumerated above.

Minimum Qualifications

• Requires Bachelor's degree from an accredited college or university in information security, computer science, information technology, or a closely related field.
• Requires a minimum of five (5) years of progressively responsible professional experience in information security, including experience developing and administering information security policies and risk management programs.
• Requires demonstrated working knowledge of NIST security standards, the FBI CJIS Security Policy, and the HIPAA Security Rule
• Employment Condition