Senior Information Security Manager

Job Description

Our client is seeking a transformational security leader to serve as its Chief Information Security Officer. This individual will lead the agency's information security program and help modernize cybersecurity practices while protecting highly sensitive taxpayer and financial information. The role requires a leader who can balance security, compliance, innovation, and delivery. ADOR is specifically seeking a leader who operates as the "Department of How" rather than the "Department of No." This position will partner closely with technology, engineering, and business teams to implement modern security controls, automation, DevSecOps practices, compliance-as-code initiatives, and risk-based decision making. The ideal candidate combines strong technical credibility with coaching, collaboration, and change leadership capabilities.

Skills and Requirements

8+ years of information security, cybersecurity, cloud security, security engineering, infrastructure, or software development experience 3+ years of leadership experience managing security or technology teams Hands-on experience in security engineering, cloud architecture, infrastructure, or software development Experience implementing DevSecOps and security automation practices Knowledge of NIST 800-53, IRS Publication 1075, CIS Controls, and related frameworks Experience evaluating and managing enterprise technology risk Strong communication and stakeholder management skills Proven success building and developing teams Previous CISO, Deputy CISO, Security Director, or Security Engineering leadership experience Experience implementing compliance-as-code initiatives Experience with cloud-native security and zero-trust architectures Government, tax, financial services, or healthcare experience CISSP, CISM, CCSP, or related certifications Lean, Agile, or Continuous Improvement experience

Responsibilities: Lead the enterprise information security program and cybersecurity strategy Protect taxpayer data and ensure compliance with regulatory requirements Develop and implement cloud, application, infrastructure, and operational security programs Integrate security practices into software development and deployment lifecycles Establish and mature DevSecOps and security automation capabilities Drive security modernization initiatives including zero-trust and cloud-native security architectures Partner with technology teams to remove friction and enable secure delivery Communicate security risks and recommendations to executives, business leaders, and technical teams Build, mentor, and develop security professionals Support STARS modernization, cloud transformation, and AI initiatives Strengthen security culture through collaboration, education, and coaching

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].