Introduction
POSITION HIGHLIGHTS:
- Full Time
- First shift; 8:00 AM to 4:30 PM
- Monday through Friday schedule
- Location: Hartford, CT
- Hybrid
THE ROLE:
The Deputy Chief Information Security Officer position leads the Compliance, Audit and Architecture division and reports to the state Chief Information Security Officer (CISO). The Deputy CISO leads and owns the security audit compliance program for the data the state holds under federal regulation, including but not limited to: payment card data (PCI DSS), federal tax information (IRS Publication 1075), protected health information (HIPAA), substance use disorder records (42 CFR Part 2), criminal justice information (CJIS), and Social Security Administration data.
Responsibilities include:
- Direct the enterprise security compliance program for regulated data, including but not limited to PCI DSS, IRS Publication 1075, HIPAA, 42 CFR Part 2, CJIS, and Social Security Administration requirements
- Oversee security risk assessments of State, Agencies, & supporting Vendor systems and maintainthe record of risk decisions
- Plan security audits and coordinate agency responses to regulatory examinations
- Spearhead the executive branch agency information security program by establishing enterprise-wide security priorities and standards
- Develop, update and maintain security policy, standards, and the security roadmap in support of the CISO's strategy
- Represent the security program to agency leadership and external oversight bodies
- Manage the division's budget, staffing, and work assignments
- Delegated authority - defined authority to act for the Chief Information Security Officer:
- Acts with the full authority of the CISO when the CISO is absent or unavailable
- May direct Security Operations staff and resources during a declared incident, including staff outside this position's normal reporting line
- Serves as the named alternate, alongside legal counsel, in regulatory and incident-notification decisions
- Holds authority to accept information security risk on the state's behalf up to a threshold established by the CISO
Selection Plan
FOR ASSISTANCE IN APPLYING:
Check out our Applicant Tips on How to Apply! Need more resources? Visit our Applicant Toolkit for additional support throughout the recruitment process.
BEFORE YOU APPLY:
- Meet Minimum Qualifications: Ensure you meet the Minimum Qualifications listed on the job opening by the job closing date. You must specify your qualifications on your application. The minimum experience and training requirements listed must be met by the close date on the job opening, unless otherwise specified.
- Educational Credits: List your earned credits and degrees from accredited institutions accurately on your application. To receive educational credits towards qualification, the institution must be accredited. If the institution of higher learning is located outside of the U.S., you are responsible for providing documentation from a recognized USA accrediting service which specializes in determining foreign education equivalencies to the contact listed below by the closing date listed on the job posting.
- Resume Policy: Per Public Act 21-69, resumes are not accepted during the initial application process. As the recruitment process progresses, candidates may be required to submit additional documentation to support their qualification(s) for this position. This documentation may include: a cover letter, resume, transcripts, diplomas, performance reviews, attendance records, supervisory references, licensure, etc., at the request and discretion of the hiring agency.
- Preferred Shift/Location: Select all location(s) and shift(s) you are willing to work on your application. Failure to do so may result in not being considered for vacancies in that specific location or shift.
- Timely Submission: All application materials must be received by the job posting deadline. You will be unable to make revisions once you officially submit your application to the State. Late submissions are rarely accepted, with exceptions only for documented events that incapacitate individuals during the entire duration of the job posting. Request exceptions by emailing DAS.SHRM@ct.gov.
- Salary Calculations: For current state employees, salary calculations are not necessarily comparable from one of the three branches of state government (i.e., Executive, Legislative, Judicial) to the other.
- Note: The only way to apply to this posting is via the ‘Apply’ or ‘Apply Online’ buttons on the official State of Connecticut Online Employment Center job posting.
AFTER YOU APPLY:
- Some email providers may experience delays or issues delivering messages. To avoid missing important updates—such as referral questionnaires or interview scheduling links—please check your Personal Status Board regularly. For added convenience, you can also enable text (SMS) notifications. To do this, log in to your Personal Status Board and select “Update My Contact Information.”
- Referral Questions: This posting may require completion of additional Referral Questions (RQs), which must be completed by the questionnaire’s expiration date. If requested, RQs can be accessed via an email sent to you after the job close date or by visiting your JobAps Personal Status Board (Certification Questionnaires section).
- Prepare For An Interview: Interviews are limited to those whose experience and training are most aligned with the role. To prepare, review this helpful Interview Preparation Guide to make the best impression!
- Stay connected! Log in daily to your JobAps Personal Status Board to track your status and check email (including spam/junk folders) for updates and tasks.
- The immediate vacancy is listed above, however, applications to this recruitment may be used for future vacancies in this job class.
- Note: This position will be filled in accordance with contractual language, reemployment, SEBAC, transfer, promotion and merit employment rules. Candidates who are offered and accept a position with the State of Connecticut are bound by the State Code of Ethics for Public Officials and State employees, available at www.ct.gov/ethics.
- This employer may participate in E‑Verify and will provide the federal government with your Form I‑9 information to confirm work authorization.
QUESTIONS? WE’RE HERE TO HELP:
Due to high volume, we are unable to confirm receipt or provide status updates directly. For recruitment updates, please check your Personal Status Board and review our Frequently Asked Questions. If you have additional questions about the recruitment process, reach out to Sharon McIntosh, at Sharon.McIntosh@ct.gov.
PURPOSE OF JOB CLASS (NATURE OF WORK)
Within a state agency
information technology division these classes are accountable for the
management and direction of information systems, applications development,
systems maintenance, and similar information technology functions as well as
technical and support staff.
EXAMPLES OF DUTIES
- Plans, organizes and
manages all operations and activities of an information technology services
unit, division, function or location;
- Responsible for meeting
all data processing or information technology needs of the respective unit,
division, function or location; establishes priorities for systems development
and information technology projects in accordance with agency requirements;
- Coordinates, plans and
manages solution architecture projects;
- Directs the planning,
design and implementation of complex storage solution configuration;
- Develops plans for
future utilization information technology services in the overall agency
program;
- Within the financial
resources of the agency ensuring the development of high quality, low-cost
technology solutions aligned with the needs of the State and its agencies;
- Aligns information
technology planning with the business strategy;
- Leads and influences the
development of standards and decisions regarding changes to
systems/applications;
- Manages information
systems activities within areas such as IT infrastructure and architecture,
applications development, networks, computer operations and support;
- Oversees information
technology projects from conception to completion;
- Works with leadership
team to maximize cross-team contributions;
- Leads information
technology operations to ensure exceptional quality and timely response to all
customer service issues;
- Interfaces regularly
with clients/customers;
- Stays abreast of local,
regional and national industry trends;
- Understands the major
economic, political, technological and competitive trends affecting technology;
- To capture competitive
advantages, searches out challenging opportunities to change, grow, innovate
and improve;
- Compares information
technology with those of significant competitors and makes appropriate
adjustments;
- Coordinates the use of
key people, resources, technologies, process, and capabilities to reach
strategic goals;
- Sets an example by
acting in ways that are consistent with shared department values;
- Fosters collaboration by
promoting cooperative goals, building trust and enlisting others in a common
vision;
- Strengthens staff by
providing choice, developing competence and offering visible support;
- Focuses on continuous
learning for self and staff;
- Actively acknowledges
individual and team accomplishments;
- Leverages technological
solutions to meet business needs;
- Participates in the
recruitment and hiring of staff, including outreach, interview and selection;
- Performs related duties
as required.
KNOWLEDGE, SKILL AND ABILITY
- Plan and Deploy for
Business Results, which includes the ability to develop and implement business
plans, IT plans, budget plans, and human resource plans in order to maximize
budget allocations, technology, personnel and other resources to achieve agency
and program goals.
- Lead Change, which
includes innovation, the ability to be a creative problem solver and a
strategic thinker, and the ability to recognize and develop opportunities to
grow and develop information technology services in response to customers and a
changing work environment.
- Focus on Results and
Quality, including exercising and promoting accountability, and the ability to
analyze surveys, financial and other data, and use strategic planning and
performance measurement techniques to continuously improve performance and
maintain competitiveness.
- Understand Customers and
Markets, which includes the ability to establish customer satisfaction and
loyalty, forecast and conduct market analyses, keep ahead of industry trends
and incorporate “best practices” into information technology operations.
- Lead People, including
the ability to resolve conflict, communicate effectively, coach and train
employees, recognize performance, and foster diversity and teamwork.
- Build Coalitions,
including the ability to explain and advocate facts and ideas in a convincing
manner, to negotiate with individuals and groups internally and externally, to
gain cooperation from others, and to identify the internal and external
politics that impact the work of the organization.
- Business Knowledge,
including knowledge of the technical, professional, procedural and legal
requirements of the specific information technology area.
MINIMUM QUALIFICATIONS - GENERAL EXPERIENCE
Ten (10) years of
experience in computer or network administration, architecture, operations,
production control, systems development, information technology analysis and
planning.
MINIMUM QUALIFICATIONS - SPECIAL EXPERIENCE
One (1) year of the General Experience must have
been in a managerial capacity.
MINIMUM QUALIFICATIONS - SUBSTITUTIONS ALLOWED
- College training in
computer science, management information systems or a closely related field may
be substituted for the General Experience on the basis of fifteen (15) semester
hours equalling one half (1/2) year of experience to a maximum of four (4) years
for a Bachelor’s degree.
- A Master’s degree in
computer science, management information systems or a closely related field may
be substituted for one (1) additional year of the General Experience.
PREFERRED QUALIFICATIONS
- Possession of current Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC) or Certified Information Systems Auditor (CISA) certifications
- Experience supervising employees who perform information security functions
- Experience working in an information security compliance program in an organization subject to federal regulatory audit
- Experience establishing an enterprise information security program based on a recognized control framework
- Experience conducting security risk assessments that resulted in documented risk-acceptance decisions
Conclusion
AN AFFIRMATIVE ACTION/EQUAL OPPORTUNITY EMPLOYER
The State of Connecticut is an equal opportunity/affirmative action employer and strongly encourages the applications of women, minorities, and persons with disabilities.
ACKNOWLEDGEMENT
As defined by Sec. 5-196 of the Connecticut
General Statutes, a job class is a position or group of positions that share
general characteristics and are categorized under a single title for
administrative purposes. As such, a job class is not meant to be
all-inclusive of every task and/or responsibility.