Information Technology Officer (Chief Information Security Officer)

at  Hawaii State Judiciary

POSITION SPECIFIC DESCRIPTION

Recruitment Number 24-158TY, Information Technology Officer (Chief Information Security Officer), EM-05 ($9,142 - $10,788 per month)*, Honolulu, O`ahu.

EDUCATION REQUIREMENT:

Graduation from an accredited four (4) year college or university with a bachelor’s degree.
Excess work experience as described under Specialized Experience below, or any other responsible administrative, professional or analytical work experience which provided knowledge and abilities comparable to those acquired in four (4) years of successful study while completing a college or university curriculum leading to a bachelor’s degree may be substituted on a year-for-year basis. To be acceptable, the experience must have been of such scope, level and quality as to assure the possession of comparable knowledge and abilities.
The education or experience background must also demonstrate the ability to write clear and comprehensive reports and other documents; read and interpret complex written material; and solve complex problems logically and systematically.

SPECIALIZED EXPERIENCE REQUIREMENT:

Three and one-half (3 1/2) years of experience in the management, development, evaluation, and production support components for applications or infrastructure used in a major functional area of information technology. The management component consists of managing, planning, and communicating and the development of standards, procedures, and best practices for organizations; the development component consists of analysis, design, development and implementation; the evaluation component consists of evaluation, cost analysis and procurement; and the production support component consists of modification and maintenance.
The work performed must have regularly encompassed working on difficult and complex situations and problems and provide advisory services to management in either the area of complex enterprise database applications with public facing services; or in a combination of the following information technology areas: local and wide area networks; voice and video communication systems; server clusters with network storage; data centers and associated infrastructure; centralized desktop management and related peripherals; commercial off-the-shelf software and IT security; and the continuity of operations (COOP) with these areas.
The above experiences must have included work which involved gathering, evaluating and analyzing facts and other pertinent information required to resolve problems and/or determine and recommend appropriate courses of action. Such experience must have demonstrated the ability to elicit information orally and in writing, apply problem solving methods and techniques, identify alternatives, use judgement in determining appropriate alternatives, and prepare clear and concise written reports and recommendations for action.

STAFF SPECIALIST OR SUPERVISORY EXPERIENCE:

Two (2) years of Staff Specialist or Supervisory Experience must be within the position’s designated specialty area and must be of the type and qualify described below:
a. Staff Specialist Experience: Information technology management specialist experience performing work of a highly complex nature requiring comprehensive knowledge in one or more specialty areas. Such work experience generally involves serving as a senior specialist in an assigned area requiring highly specialized technical knowledge for a range of various systems or for a highly complex system; or serving as a team leader on a regular basis.
b. Supervisory Experience: Work experience in a designated information systems management field which included: (1) planning and directing the work of others; (2) assigning and reviewing their work; (3) advising them of difficult problem areas; (4) timing and scheduling their work; (5) training and developing new employees; and (6) disciplining them when necessary.

ADMINISTRATIVE EXPERIENCE:

Administrative aptitude rather than actual administrative experience may be accepted. Administrative aptitude is the demonstration of aptitude or potential abilities for the performance of administrative duties through successful completion of regular or special assignments or projects which involve administrative problems (e.g. in planning, organizing, promoting, and directing a program providing staff advice and assistance); interest in management demonstrated by the performance of work assignments in a manner which clearly indicates awareness of problems and the ability to solve them; completion of educational or training courses in the areas of management accompanied by the application of principles, which were learned, to work assignments; management’s observation and evaluation of the applicant’s leadership and managerial capabilities; or by success in trial assignments to managerial and/or administrative tasks.

This position is located in the Information Technology and Systems Department, Infrastructure Division 1 and serves as the division manager and assumes responsibility for developing and maintaining the Judiciary’s information security program. Duties include:

• Responsible for identifying, evaluating and reporting on information security risks in a manner that meets compliance and regulatory requirements, and aligns with and supports the risk posture of the Judiciary.
• Serves as the Chief Information Security Officer (CISO) and proactively works with the other divisions and Judiciary programs to implement practices that meet defined policies and standards for information security.
• Oversee a variety of IT-related risk management activities.
• Lead the development, implementation and maintenance of a business continuity and disaster and/or security incident recovery plan.
• Supports the Director of the Information Technology and Systems Department in the process of all assurance activities related to the availability, integrity and confidentiality of customer, business partner, employee and business information in compliance with the Judiciary’s information security policies.
• Work with senior management to determine acceptable levels of risk for the organization.
• The CISO must be highly knowledgeable about the business environment and ensure that information systems are maintained in a fully functional, secure mode.