Chief Information Security Officer

at  South Dakota State Government

Job ID: 29282
Agency: Bureau of Information & Telecommunications
Location: Pierre, SD or Sioux Falls, SD
Salary: $107,000 - $158,000 annually, depending on qualifications
Pay Grade: O
Closing Date: 12/6/24
This is a Full-Time 40 Hours Weekly position with the Bureau of Information & Telecommunications (BIT). For more information on the BIT, please visit https://www.sd.gov/bit.
The Chief Information Security Officer (CISO) will lead South Dakota’s strategic cybersecurity vision and statewide security initiatives, focusing on proactive risk management, regulatory compliance, and embedding cybersecurity within all aspects of state government operations. This role involves coordinating with agencies to establish a cohesive security framework, prioritizing investments in security technology, and maintaining the state’s readiness against evolving cyber threats. The CISO serves as the state’s foremost security leader, liaising with external partners, advising executive leadership, and fostering a security-conscious culture across all state departments.

Key responsibilities will include:

• Strategic Security Leadership: Develop and implement a cybersecurity strategy that prioritizes risk-based initiatives. Advise BIT leadership and agency executives on security policies and investment needs.
• Policy Oversight: Ensure statewide compliance with security policies and regulations; lead cross-agency governance to maintain consistent risk management practices.
• Risk Management & Threat Intelligence: Establish a comprehensive risk management framework; oversee threat intelligence programs and assess statewide security risks.
• Incident Response & Crisis Management: Lead Incident Response and Disaster Recovery programs, ensuring readiness and continuous improvement through post-incident analysis.
• Inter-Agency Coordination: Collaborate with agency leaders to embed security across operations and drive unified security practices.
• Security Awareness: Champion a security-conscious culture through statewide training and awareness programs.
• Public & Stakeholder Engagement: Represent South Dakota in federal and industry partnerships, advocating for the state’s cybersecurity priorities.
• Budget & Resource Management: Oversee cybersecurity budgets and investments, ensuring resources align with strategic goals.
• Performance & Reporting: Track KPIs to monitor the effectiveness of security initiatives; provide transparent performance reports to BIT leadership.

SKILLS & COMPETENCIES:

• Strategic Leadership: Ability to drive long-term cybersecurity strategy and risk management programs.
• Communication: Strong skills in communicating complex security concepts to executive and non-technical audiences.
• Technical Knowledge: Comprehensive understanding of cybersecurity frameworks, regulatory compliance, and threat intelligence.
• Analytical Thinking: Proficient in assessing risk, analyzing threat intelligence, and making high-stakes decisions.
• Collaborative Approach: Able to work across departments and with external partners to enhance state-wide security efforts.

• Strategic Security Leadership: Develop and implement a cybersecurity strategy that prioritizes risk-based initiatives. Advise BIT leadership and agency executives on security policies and investment needs.
• Policy Oversight: Ensure statewide compliance with security policies and regulations; lead cross-agency governance to maintain consistent risk management practices.
• Risk Management & Threat Intelligence: Establish a comprehensive risk management framework; oversee threat intelligence programs and assess statewide security risks.
• Incident Response & Crisis Management: Lead Incident Response and Disaster Recovery programs, ensuring readiness and continuous improvement through post-incident analysis.
• Inter-Agency Coordination: Collaborate with agency leaders to embed security across operations and drive unified security practices.
• Security Awareness: Champion a security-conscious culture through statewide training and awareness programs.
• Public & Stakeholder Engagement: Represent South Dakota in federal and industry partnerships, advocating for the state’s cybersecurity priorities.
• Budget & Resource Management: Oversee cybersecurity budgets and investments, ensuring resources align with strategic goals.
• Performance & Reporting: Track KPIs to monitor the effectiveness of security initiatives; provide transparent performance reports to BIT leadership