Chief Information Security Officer (Information Systems Department)

POSITION SUMMARY:

The Chief Information Security Officer of the County of Berks is responsible for collaborating with the county CIO and other county leadership in overseeing and managing the cybersecurity strategy, operations, and compliance efforts for the organization.

This position plays a critical role in protecting the confidentiality, integrity, and availability of the organization's information assets and systems while ensuring compliance with relevant policies, laws, and regulations.

The CISO and his/her staff will develop and execute a comprehensive cybersecurity strategy aligned with the organization's goals and objectives.

This position will serve as one of the primary advisors to organizational leadership on cybersecurity matters, providing guidance and recommendations to mitigate risks and address emerging threats.

The CISO and his/her staff will strive to ensure adherence to regulatory requirements such as the Criminal Justice Information Services (CJIS) Security Policy, HIPAA, and other applicable federal, state, and local laws. 

The CISO will collaborate with leadership to develop, implement, and update cybersecurity policies and procedures.

This position will play a key role in developing and maintaining the organization’s Cybersecurity Incident Response Plan, ensuring preparedness to address and recover from security incidents.

The CISO will work with stakeholders to create and regularly update the organization’s Continuity of Operations Plan (COOP), ensuring resilience and continuity during disruptions.

This position will be responsible to collaborate with the rest of the I.S.

department and operational teams to integrate security measures into system design, procurement, and implementation processes.

The CISO will evaluate and recommend security technologies, tools, and services to enhance the organization’s cybersecurity posture.

The CISO and his/her staff will be responsible for overseeing the deployment, management, and monitoring of security infrastructure, including firewalls, IDS/IPS, EDR solutions, and many other security and technology solutions.

POSITION RESPONSIBILITIES:

Essential Functions

The duties and responsibilities of this position include, but are not necessarily limited to:


* Accountable for the overall performance and efficacy of security projects and programs


* Analyzing security risks.


* Managing compliance efforts for HIPAA, CJIS, PCI, and other sensitive data sets.


* Recommending and implementing security safeguards.


* Monitoring compliance with security laws and regulations.


* Investigating information security and compliance incidents.


* Manage security reporting & executive reporting.


* Oversee end-user security awareness program.


* Manage regular security and compliance tasks.


* Serve as project manager for designated security projects.


* Review security and compliance of equipment configurations.


* Maintain security and com...