Come join the local government that continues to inspire its citizens, employees, and others! Cary’s award-winning Information Technology team remains at the cutting edge of technology, integration, and innovation. We are seeking an experienced CISO, a security expert who understands the challenges and complexities of securing information technology systems that utilize emerging technologies such as Internet of Things (IoT), Artificial Intelligence (AI), and Machine Learning (ML). The CISO will lead the development, implementation, and management of our organization information security program and will play a critical role in protecting our organization sensitive data and critical infrastructure from cyber threats and other security risks.

Cary's support of our diverse workforce and providing employees with choice is representative of our amazing benefits package and competitive salaries! Our highly comprehensive total compensation package is unprecedented, allowing Cary to value and support our employees’ and sets us apart as an employer of choice.

If you are a motivated and experienced information security professional looking for a challenging and rewarding opportunity, we encourage you to apply!

Anticipated Hiring Range: $125,000 - $145,000

Typical Tasks:

Policy and Strategy Development

Develop, implement, and maintain comprehensive information security policies, procedures, and guidelines, considering the security implications of emerging technologies and operational requirements.
Manage the creation and regular updates of business continuity plans (BCP), incident response plans (IRP) and disaster recovery plans (DRP) to ensure organizational resilience
Provide strategic direction for the organization's security program, ensuring alignment with broader operational and organizational goals.

Leadership and Team Management

Lead and manage the Security and Network and Operations teams, integrating network performance, reliability, and security into the organization’s overall IT strategy.
Provide leadership for the organization’s security operations, ensuring collaboration between security, network, and operational teams for a unified approach to IT management.

Training and Awareness

Develop and execute a robust security awareness and training program for all employees.
Provide mentorship and training opportunities for Network and Operations team members to enhance their knowledge of security best practices.

Collaboration and Risk Mitigation

Collaborate with departments and stakeholders to ensure the security of municipal systems and data, including coordinating security assessments and penetration testing.
Manage the integration of operational security measures into network management and IT operations.

Incident Response and Threat Management

Monitor and respond to security incidents and operational disruptions, leading investigations and recommending remediation actions.
Implement proactive measures to mitigate emerging threats while ensuring network and operational uptime.

External Engagement and Compliance

Establish and maintain relationships with external stakeholders, including vendors, partners, and regulatory bodies.
Ensure compliance with all relevant legal and regulatory requirements related to information security, network operations, and IT management.

Emerging Technology Expertise

Stay current on emerging threats, security technologies, and advancements in network management. Recommend and implement actions to enhance the security and efficiency of municipal systems.

Reporting and Communication

Provide regular reports and updates to senior leadership on the status of the security and network operations program, including identified risks and incidents.

Knowledge, Skills and Abilities:

Knowledge

Information Security Policies and Frameworks
Comprehensive understanding of security frameworks such as NIST, ISO, and CIS, with a focus on creating policies and practices that prioritize the people within the organization and the community.
Expertise in developing, implementing, and maintaining security policies, procedures, and guidelines that support continuous improvement and adaptation to meet the organization’s evolving needs.
Deep knowledge of compliance requirements related to information security in municipal and governmental contexts, ensuring trust, reliability, and inclusivity in the systems and services provided to the community.
Emerging Technologies
In-depth understanding of IoT, AI, and ML technologies, recognizing their potential to enhance operations and address security challenges while creating opportunities to serve the community better.
Awareness of the latest trends, threats, and advancements in cybersecurity and network operations, with a proactive approach to experimenting and learning to keep the organization ahead of potential risks.
Incident Response and Risk Management
Proficiency in business continuity planning (BCP), incident response planning (IRP), and disaster recovery planning (DRP) to safeguard critical infrastructure and ensure operational resilience that prioritizes the people and services relying on these systems.
A strong ability to monitor, identify, and mitigate security risks, integrating a thoughtful, community-centered approach to risk management.
Security Technologies
Advanced knowledge of security tools such as firewalls, intrusion detection/prevention systems, endpoint security, and vulnerability management, implemented with a focus on balancing operational efficiency and community safety.
Municipal or Government IT Environment (Preferred)
Knowledge of the unique challenges and operational requirements of municipal or government IT systems, coupled with an understanding of how secure and reliable technology enhances the quality of life for all residents.

Skills

Leadership and Team Management
Proven ability to lead cross-functional teams by fostering a supportive, inclusive culture that values each individual’s contributions and empowers everyone to take ownership of their roles in making the organization stronger.
Talent for mentoring and developing team members, focusing on their growth as professionals and leaders, while creating opportunities for collaboration and learning that build trust and unity.
Strategic Planning and Execution
Exceptional skill in aligning security initiatives with organizational goals, ensuring that efforts are focused on the most impactful tasks to benefit the people served by the organization.
Expertise in setting a strategic direction that embraces experimentation and innovation, ensuring the organization adapts effectively to an ever-changing technology landscape.
Communication and Collaboration
Outstanding written and verbal communication skills that make complex security concepts accessible and actionable for both technical and non-technical stakeholders, building trust and shared understanding.
Strong collaboration skills to work effectively across departments, with external partners, and with regulatory bodies, ensuring collective responsibility for security and resilience.
Technical Proficiency
Expertise in managing and optimizing security technologies, seamlessly integrating them into broader IT ecosystems to enhance the organization’s overall effectiveness.
Experience conducting security assessments, penetration testing, and threat modeling, ensuring these processes contribute to a culture of preparedness and innovation.

Abilities

Adaptation and Continuous Improvement
Ability to adapt to emerging security challenges and rapidly evolving technology landscapes while fostering an organizational culture that values learning, growth, and creating a better future through innovation.
Commitment to continuously improving security practices by seeking opportunities to experiment and refine approaches, ensuring the organization remains at the forefront of best practices.
Risk Identification and Mitigation
Capability to identify potential risks proactively and implement strategies to mitigate them effectively, ensuring the safety and reliability of systems while prioritizing the well-being of the people relying on them.
Strength in embedding a risk-aware mindset into the culture, empowering individuals at all levels to take ownership of identifying and addressing potential vulnerabilities.
Decision-Making and Problem-Solving
Ability to make thoughtful, strategic decisions under pressure during incidents, ensuring minimal disruption to services and maximum protection for the community and its assets.
Skilled at analyzing complex problems, identifying root causes, and implementing solutions that balance immediate needs with long-term goals, always with a focus on making a positive impact on people’s lives.
Community Engagement and Representation
Strong ability to represent the organization effectively in engagements with external stakeholders, vendors, and regulatory agencies, fostering trust and collaboration through transparent communication.
Commitment to enhancing public trust by ensuring the security and reliability of municipal systems, demonstrating the organization’s dedication to the well-being and inclusivity of the community it serves.

Minimum and Preferred Qualifications:

Requires any combination of education and experience equivalent to graduation from an accredited college or university with a Bachelor's degree in Computer Science or Information Security and extensive progressive experience in Information Security. Candidates must also have a minimum of 5 years of experience in leadership and management roles within Information Security.

Preferred Qualification:

Relevant certification such as Certified Information Systems Security Professional (CISSP) or CompTIA Security+
Municipal or Government IT Environment

Special Requirements:

Requires a valid driver's license with an acceptable driving record.
Requires drug testing and background check (which may include criminal check, education verification and credit history review) prior to employment.

Town of Cary jobs

CISO