Information Security Officer

Air InfoSec

. Provide leadership and strategic direction for the agency’s information security, risk management, governance, and compliance programs .

Posted 10/26/2026contractAustin • Texas • United StatesSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in information security leadership, risk management, and compliance, with a strong focus on developing and implementing security policies and strategies. Proven ability to conduct risk assessments and audits while ensuring adherence to regulatory standards and collaborating with cross-functional teams.

Highest-signal resume keywords

Information Security LeadershipRisk ManagementCompliance ProgramsNIST and CIS ControlsCISSP or CISM Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecurityCybersecurityRisk AssessmentsSecurity PoliciesCompliance ReviewsRemediation ActivitiesSecurity AuditsGovernanceStrategic DirectionSecurity Standards

Soft Skills

LeadershipCollaborationLogical ReasoningProblem SolvingCommunication

Tools & Technologies

Microsoft AzureMicrosoft 365Entra IDCyber Command Security RequirementsTX-RAMPFedRAMPSOC 2

Certifications & Qualifications

CISSPCISM

Industry Keywords

Information Security GovernanceRisk Management FrameworkState and Federal ComplianceThird-Party Risk ManagementBusiness ContinuityDisaster Recovery

Tech Stack

Tools & technologies

AzureCloudCyber Security

About the role

Key responsibilities & impact

Provide leadership and strategic direction for the agency’s information security, risk management, governance, and compliance programs
Develop, implement, and oversee enterprise-wide security policies, standards, and controls
Plan and conduct security risk assessments, audits, and compliance reviews
Oversee remediation activities
Develop and maintain security strategies aligned with organizational objectives
Ensure compliance with applicable state and federal laws, regulations, and industry standards
Protect the confidentiality, integrity, and availability of agency information assets
Serve as the agency’s principal information security advisor
Collaborate with agency leadership, courts, business units, and technology teams to identify and manage risk
Lead security initiatives, projects, and cross-functional teams
Present recommendations to management
Evaluate alternative solutions and approaches to security problems using sound logic and independent judgment

Requirements

What you’ll need

7 years of experience working in a fast-paced environment with changing priorities
6 years of experience in information security, cybersecurity, or information technology
4 years of experience developing, implementing, or administering information security policies, standards, controls, risk management, or compliance programs
4 years of experience leading security initiatives, projects, or cross-functional teams and presenting recommendations to management
4 years of experience conducting security risk assessments, audits, compliance reviews, and remediation activities
4 years of experience with NIST, CIS Controls, Texas Administrative Code 202, DIR and Cyber Command security requirements, TX-RAMP, FedRAMP, and SOC 2
One or more industry certifications, such as CISSP or CISM
Skill in using logic and reasoning to identify the strengths and weaknesses of alternative solutions, conclusions, or approaches to problems
Ability to quickly learn new technologies or solutions independently
Candidates must reside within 50 miles of Austin, Texas
Candidates must be authorized to work in the U.S.
Preferred: 5 years of experience working with State Government agencies
Preferred: 3 years of experience coordinating and using vendor-provided support
Preferred: 3 years of experience serving as an Information Security Officer or equivalent security leadership role
Preferred: 2 years of experience presenting cybersecurity, risk, or compliance matters to executive leadership and other stakeholders
Preferred: 2 years of experience with business continuity, disaster recovery, third-party risk management, and cloud environments, including Microsoft Azure, Microsoft 365, and Entra ID

Benefits

Comp & perks

Telework as part of a hybrid work arrangement
Monday through Friday schedule, 8:00 AM to 5:00 PM
State holidays when the agency is closed