Enterprise Risk & Security Director

Job Code: 31004036
Salary Grade: DT15
Revision Date: 12/2021

Class Concept

This level is the enterprise IT security authority who is responsible for the development and enforcement of security policy and strategy for the State. Oversees the selection, development, deployment, monitoring, maintenance, and enhancement of the enterprise security technology. Oversees and administers security and risk determination programs and procedures for the State by providing direction to all entities.

Recruitment Requirements

Knowledge, Skills, and Abilities

• Thorough knowledge of risk management in the areas of operations, technology, security, data strategy, people, exogenous factors, and disaster recovery.
• Expertise in IT security disciplines.
• Demonstrated skills in strategic planning to create integrated risk strategies.
• Ability to apply and enforce laws, regulations, and policies across all areas of risk.
• Solid teamwork and interpersonal skills and the ability to communicate with customers, employees, and senior management.
• Excellent oral/written communication and ability to present and discuss technical information in a way that establishes rapport, persuades others and gains understanding.
• Demonstrated ability to create policies and/or programs across multiple agencies.
• Ability to exercise independent judgment and creative problem-solving techniques in a highly complex environment using leading edge technology and/or diverse user systems.
• Strong business planning, analytical and conceptual skills. Ability to develop new system approaches, solve problems and seize opportunities for sustaining business success.
• Exceptional project management skills, including the ability to effectively deploy resources and manage multiple projects of various diverse scope in cross-functional environment.

Minimum Education and Experience

Bachelor's degree in computer science or an IT related field or related degree from an appropriately accredited institution and eight years of progressive experience in the field of information technology including at least four years of management experience related to IT security; or Associate degree in computer science or an IT related field or related degree from an appropriately accredited institution and ten years of progressive experience in the field of information technology including at least four years management experience related to IT security; or an equivalent combination of education and experience.