Chief Information Security Officer

1 day a week onsite, remote the rest of days

Must Haves:

• 8+ years of information security, cybersecurity, cloud security, security engineering, infrastructure, or software development experience
• 3+ years of leadership experience managing security or technology teams
• Hands-on experience in security engineering, cloud architecture, infrastructure, or software development
• Experience implementing DevSecOps and security automation practices
• Knowledge of NIST 800-53, IRS Publication 1075, CIS Controls, and related frameworks
• Experience evaluating and managing enterprise technology risk
• Strong communication and stakeholder management skills
• Proven success building and developing teams

Pluses:

• Previous CISO, Deputy CISO, Security Director, or Security Engineering leadership experience
• Experience implementing compliance-as-code initiatives
• Experience with cloud-native security and zero-trust architectures
• Government, tax, financial services, or healthcare experience
• CISSP, CISM, CCSP, or related certifications
• Lean, Agile, or Continuous Improvement experience

Responsibilities:

Lead the enterprise information security program and cybersecurity strategy

Protect taxpayer data and ensure compliance with regulatory requirements

Develop and implement cloud, application, infrastructure, and operational security programs

Integrate security practices into software development and deployment lifecycles

Establish and mature DevSecOps and security automation capabilities

Drive security modernization initiatives including zero-trust and cloud-native security architectures

Partner with technology teams to remove friction and enable secure delivery

Communicate security risks and recommendations to executives, business leaders, and technical teams

Build, mentor, and develop security professionals

Support STARS modernization, cloud transformation, and AI initiatives

Strengthen security culture through collaboration, education, and coaching

Job Description

Our client is seeking a transformational security leader to serve as its Chief Information Security Officer. This individual will lead the agency's information security program and help modernize cybersecurity practices while protecting highly sensitive taxpayer and financial information. The role requires a leader who can balance security, compliance, innovation, and delivery.

ADOR is specifically seeking a leader who operates as the "Department of How" rather than the "Department of No." This position will partner closely with technology, engineering, and business teams to implement modern security controls, automation, DevSecOps practices, compliance-as-code initiatives, and risk-based decision making.The ideal candidate combines strong technical credibility with coaching, collaboration, and change leadership capabilities.