Chief Information Security Officer (Contract)

The Chief Information Security Officer serves as the Department of Corrections' information security leader, overseeing the agency's security program in coordination with the Department of Innovation and Technology. The role establishes and enforces security policies, manages risk assessments and compliance with federal and state requirements including HIPAA and criminal justice standards, directs incident response activities, and delivers security training across the department. This is a contract position based in Springfield, IL with a hybrid work schedule requiring periodic headquarters attendance.

Key qualifications:

• Experience establishing and maintaining information security policies, standards, and procedures
• Knowledge of NIST standards, HIPAA Security Rule, and FBI Criminal Justice Information Services Security Policy
• Expertise in information security risk management, security control assessments, and incident response
• Experience with identity and access management and privileged access controls
• Ability to serve as primary point of contact for external audits and compliance reviews