**Working Title: Business Information Security Officer** **Job Class: Information Systems Manager** **Agency: Minnesota IT Services** + **Job ID** : 83726 + **Location** : St. Paul + **Telework Eligible** : Yes - #LI-Hyrbrid + **Full/Part Time** : Full-Time + **Regular/Temporary** : Unlimited + **Who May Apply** : Open to all qualified job seekers + **Date Posted** : 01/31/2025 + **Closing Date** : 02/13/2025 + **Hiring Agency/Seniority Unit** : Minnesota IT Services + **Division/Unit** : Enterprise Security + **Work Shift/Work Hours** : Day Shift + **Days of Work** : Monday - Friday + **Travel Required** : No + **Salary Range:** $44.86 - $76.77 / hourly; $93,667 - $160,295 / annually + **Classified Status** : Classified + **Bargaining Unit/Union** : 216 - Middle Management Association/MMA + **FLSA Status** : Exempt - Executive + Designated in Connect 700 Program for Applicants with Disabilities (https://mn.gov/mmb/careers/diverse-workforce/people-with-disabilities/connect700/) : Yes **The work you'll do is more than just a job.** At the State of Minnesota, employees play a critical role in developing policies, providing essential services, and working to improve the well-being and quality of life for all Minnesotans. The State of Minnesota is committed to equity and inclusion, and invests in employees by providing benefits, support resources, and training and development opportunities. **Enterprise Security:** Join the 2,800+ professionals of Minnesota IT Services (https://mn.gov/mnit/about-mnit/careers/) (MNIT) who connect Minnesotans to services that will improve their lives. This position will be part of the Enterprise Security team, which embeds security protection statewide. **_We will be filling multiple vacancies from this one posting. All applicants will be considered for these vacancies._** As a Business Information Security Officer (BISO) you will provide customer facing security services to the set of agencies within the Line of Business and assist State’s Chief Information Security Officer to carry out the strategic direction of the State’s security program. This position serves as the primary security liaison to the agencies within the line of business and provides leadership, management, and oversight to carry out the information security services necessary to protect the State’s systems and data. The Security Manager will work in concert with the State CISO to establish and implement short- and long-term organizational goals, objectives, strategic plans, policies, standards, and operating procedures to ensure that the information assets within the line of business are adequately protected against current/future internal/external threats. The position is responsible for identifying, directing, coordinating, evaluating, and reporting on information security risks and security requirements to meet agency business needs. The Security Manager will maintain a high degree of coordination and interaction between central and BISO team to deliver a comprehensive suite of information security services. The position is responsible for identifying, directing, coordinating, evaluating, and reporting on information security risks and security requirements to meet agency business needs and will work closely with the agency Chief Business Technology Officer (CBTO) and agency Executive Team to balance to the security risk posture of the agency. The Security Manager will maintain a high degree of coordination and interaction between central and BISO team to deliver a comprehensive suite of information security services. The position is also responsible for budgeting, project prioritization and maintains an organizational structure and staffing to effectively accomplish the security organizational and line of business goals and objectives. **This position is currently eligible for full-time telework:** + Telework (https://mn.gov/mmb-stat/policies/1422-telework.pdf) for Minnesota IT Services allows an employee to perform work from a telework location and an employee may be required to be in the office based on business needs and other dependencies in St Paul, Minnesota. + Only candidates located in Minnesota and bordering states (Iowa, North Dakota, South Dakota, or Wisconsin) are telework eligible. **Minimum Qualifications** **Candidates must clearly demonstrate all of the following qualifications in their resume.** Resume tips here. (https://mn.gov/mnit/about-mnit/careers/hiringprocess.jsp) **:** Position requires a minimum of five (5) years of experience in of progressive information security experience. Experience must include: + Two (2) years of supervisory experience. Two (2) years of experience in a Systems Architect classification or two (2) years of experience in an external IT Architect role may substitute for the required supervisory experience. + Extensive experience of technology leadership with breadth across information security. + Experience with security technologies, markets and vendors including firewall, intrusion detection, assessment tools, encryption, application development security, and access management. + Knowledge of information security industry accepted frameworks and related State and Federal regulations. + Experience developing and implementing policies, standards and guidelines that can be implemented by the various security and technical teams. + Experience implementing security related projects or programs in a matrix structure with ability to manage and coach others. + Ability to deliver effective verbal or written messages that facilitate a mutual understanding on both parties. + Customer service skills that include active listening, empathy, and problem-solving. **Preferred Qualifications** + Bachelor's degree or higher in Computer Science, Information Technology or related field. + Experience managing a budget. + Advanced information security certifications. + Thorough knowledge of architecture and security standards. + Knowledge of security risk assessments, policy and compliance, access management, vulnerability management, security monitoring, boundary defense, security awareness and disaster recovery. + Ability to provide analytical skills to diverse problems and projects to provide effective assessment and solution generation. + Ability to represent the security program leadership, strategies, direction and decisions in a professional and positive manner to all internal and external audience. + Strong verbal and written communication skills, especially with senior executives. **Additional Requirements** It is the policy of Minnesota IT Services that a successful candidate must pass all legally required checks prior to employment which may consist of the following: + SEMA4 Records Check (applies to current and past state employees only) + Criminal History Check + Reference Check + Social Security and Address Verification Education Verification + CJIS Background Check + Other legally required checks **Minnesota IT Services does not participate in E-Verify. Minnesota IT Services will not sponsor applicant for work visas, including F-1 STEM OPT extensions. All applicants must be legally authorized to work in the United States.** AN EQUAL OPPORTUNITY EMPLOYER Minnesota State Colleges and Universities is an Equal Opportunity employer/educator committed to the principles of diversity. We prohibit discrimination against qualified individuals based on their race, sex, color, creed, religion, age, national origin, disability, protected veteran status, marital status, status with regard to public assistance, sexual orientation, gender identity, gender expression, or membership in a local commission as defined by law. As an affirmative action employer, we actively seek and encourage applications from women, minorities, persons with disabilities, and individuals with protected veteran status. Reasonable accommodations will be made to all qualified applicants with disabilities. If you are an individual with a disability who needs assistance or cannot access the online job application system, please contact the job information line at 651-259-3637 or email careers@state.mn.us . Please indicate what assistance is needed.