Recent Listing

Posted: January 6, 2026 (9 days ago)

This job has been posted for 1-2 weeks. Still a good time to apply.

Deputy Chief Information Security Officer | Compliance and Attestation

State of Washington

Dept. of Corrections

Recent

Location

Washington, 98504

Salary

$102,264 - $137,520

per year

Closes

January 20, 2026More State jobs →

Job Description

Summary

This job involves leading efforts to protect the Department of Corrections' computer systems and data by designing secure technology setups, managing compliance checks, and overseeing security audits like vulnerability scans and penetration tests.

It requires working closely with IT teams to identify risks and create practical solutions that keep operations running smoothly while meeting strict safety standards.

A good fit would be an experienced IT security professional who enjoys strategic planning, team leadership, and solving complex tech problems in a public safety context.

Key Requirements

  • Experience in IT security architecture, including developing security baselines and infrastructure diagrams
  • Leadership in cybersecurity assessments, such as audits, penetration testing, and vulnerability risk analysis
  • Knowledge of IT compliance standards and technology risk management
  • Ability to lead teams, facilitate presentations to stakeholders, and drive architecture changes
  • Strong problem-solving skills for translating security findings into practical designs
  • Commitment to public service, equity, and innovation in a government environment
  • Reliable internet for telework/hybrid role with possible travel within Washington State

Full Job Description

Deputy Chief Information Security Officer | Compliance and Attestation

Deputy Chief Information Security Officer | Compliance and Attestation

(IT Architecture Senior Specialist)

Full Time | Permanent

Salary Range: $102,264 - $137,520 Annually


This is a telework/hybrid position. The candidate of choice may work from anywhere within the state of Washington with a reliable internet connection. Travel may be required.


Information Technology is the backbone of everything the Department of Corrections does—powering secure operations across facilities, field offices, and remote teams statewide.

When systems are compromised, the impact is real: confidential data is at risk, operations slow, and public safety can be affected.

That’s why the Department of Corrections is seeking a strategic, tech-savvy leader to join our team as Deputy Chief Information Security Officer | Compliance and Attestation (IT Architecture Senior/Specialist).


This highly influential role sets the direction for security architecture, IT compliance, and technology risk management across the agency.

As Deputy CISO, you will shape how DOC protects its systems, data, and digital infrastructure—ensuring security is built into everything we do while keeping systems reliable, available, and ready to support mission-critical work.


You will bring creative, forward-thinking problem-solving to partner with IT leaders and technical teams, translating security findings into smart, practical architecture and compliance decisions.

Your leadership will ensure DOC’s technology meets rigorous security standards while enabling innovation, efficiency, and statewide service delivery.


In this role, you will also lead the Cybersecurity Assessment and Compliance team—overseeing audits, penetration testing, security architecture reviews, and compliance documentation.

Together, you’ll identify vulnerabilities, reduce risk, and strengthen the resilience of the DOC’s network and systems that thousands of employees depend on every day.


If you’re passionate about protecting complex technology environments, leading high-impact security initiatives, and supporting a mission that improves public safety and changes lives, we invite you to apply and help secure the future of the Department of Corrections!


A completed application packet will include:

  • A cover letter regarding your interest in this position with our agency
  • A detailed resume
  • Three professional references

Requirements

We are looking for teammates who share our vision of public service, committed to an equitable and inclusive culture that fosters and inspires excellence, while promoting innovation, engagement, and safety, leading to better outcomes for our incarcerated population, our agency, and our community.


As an IT Architecture Senior Specialist, some of your duties will include:

  • Analyzing and assessing vulnerability risks identified during scans to support system changes and leading IT architecture or design changes required to address IT architecture, functionality and configuration which could include:
    • Developing Minimum Security Baseline configurations for new technologies
    • Developing and maintaining infrastructure architecture diagrams to facilitate engineering material builds
    • Leading and facilitating architecture presentations to project teams, working groups, design authorities, and leadership
    • Developing and enhancing target architectures as well as target operate models for new/existing architectures and services
    • Developing Minimum Security Baseline configurations for new technologies.
  • Maintaining a coordinated enterprise-level vulnerability management program that effectively reviews, analyzes, communicates, and guides remediation of IT vulnerabilities which could look like:
    • Validating and confirming accuracy and scope of scanning infrastructure with IT teams through both manual and automated processes.
    • Detecting and remediating vulnerabilities within established timelines
    • Ensuring regular security scans are scheduled and completed to reduce exposure time
    • Determining and maintaining the scope of systems to include in the vulnerability scanning
    • Ensuring IT Architectural Standards are consistent across the enterprise
  • Analyzing and assessing the criticality from internal and external vulnerability scans to understand the impact, potential mitigation and delivers and implements remediation plans
  • Identifying and executing attack surface reduction opportunities via vulnerability data analysis, trends, and log reviews
  • Responding to cyber security incidents and assists with threat hunting and data analysis to protect and maintaining the overall IT security of DOC
  • Other tasks

Qualifications

What we need (required qualifications):

  • A Bachelor’s degree in business administration, computer science, or related field

AND

  • Five (5) years of information technology experience providing enterprise architecture services*

OR

  • High school diploma

AND

  • Four years of a combination of IT related training and experience

AND

  • Five (5) years of information technology experience providing enterprise architecture services*

In addition to the above education and experience, the below knowledge, skills and/or abilities are required:

  • Five (5) years’ experience in working in a complex/enterprise IT environment across multiple disciplines (IT Security, network engineering, application security, database, risk management, project management, etc.)*
  • Two (2) years’ experience using PowerShell
  • Two (2) years utilizing either Azure Advanced Threat Protection (ATP), Microsoft Defender for Endpoint (Microsoft Defender ATP) or Office 365 ATP
  • Two (2) years’ experience articulate business risks of technical issues to non-technical personnel.
  • Knowledge of core Information Security concepts related to Threat and Vulnerability Management
  • Experience with performing complex network vulnerability scans in both on-prem and cloud environments using common vulnerability assessment tools
  • Understanding of governing security principals (PCI, ISO 27000 series, FFIEC, NYSDFS, NIST)
  • Prior experience with vulnerability scanning technology (Risk Sense, Nessus, Tenable, etc.)
  • Experience in analyzing, identifying, and developing remediation plans for vulnerabilities

*Experience can be gained concurrently


What will make your application stand out (preferred qualifications):

  • Training, experience, or certification in Information security certifications: (SANS, CISSP, CompTIA, ISC2, etc).
  • Two years (2) of hands-on experience with production Cloud systems (AWS, Azure)

Additional Information

Vision: Working together for safer communities.

Mission: Improving public safety by positively changing lives.

Our Commitment: To operate a safe and humane corrections system and partner with others to transform lives for a better Washington.


DOC is an equal opportunity employer and does not discriminate on the basis of race, creed, color, national origin, sex, marital status, sexual orientation, gender identity, gender expression, age, honorably discharged veteran, veteran status, genetic information, or the presence of any sensory, mental or physical disability or the use of a trained guide dog or service animal by a person with a disability.


IMPORTANT NOTES:

  • This recruitment may be utilized to fill more than one position.
  • Please include a minimum of three (3) professional references with your application.

    A professional reference is defined as an individual who has been paid to supervise your work and can attest to your work performance, technical skills, and job competencies.

    If you do not have any or sufficient professional references, please include non-related professionals, such as educators or other professional associates.**Please note: Phone number AND email address are required for all professional references.

  • A background check including criminal record history will be conducted prior to a new hire. Information from the background check will not necessarily preclude employment but will be considered in determining the applicant’s suitability and competence to perform in the position.
  • Employees may work directly with or near incarcerated individuals in a potentially hazardous setting. Please consider this when deciding whether to apply.
  • We are committed to maintaining a drug and alcohol-free work environment, and our employees are expected to comply with all state and federal laws.

    A pre-employment drug test may be administered as part of the selection process, and applicants who test positive for any controlled substances, will be disqualified from consideration.

  • Oleoresin Capsicum (OC) is an aerosol pepper spray made available as a means of self-defense and/or de-escalation. Applicants with sensitivities or allergies are encouraged to ask about the level of exposure they could expect in this position.
  • Animal care projects are a common component of most Washington State prisons, including dog and cat programs. Applicants with animal sensitivities or allergies are encouraged to ask about the level of exposure they could expect in this position.
  • Tuberculosis (TB) is a priority health issue for DOC employees. The successful candidate may be required to provide valid proof of a baseline TB skin test within 60 days from the date of hire.

    When positive tests result, further information, testing and treatment will also be required. Employment is not contingent upon test results.

    Foreign equivalent degrees awarded outside the United States must have a credential evaluation report attached to your application.

    You may request the required evaluation/documentation from www.wes.org and www.aice-eval.org. Until this documentation is provided, you will not be selected to move forward in the hiring process.

    DOC complies with the employment eligibility verification requirements for the federal employment eligibility verification form I-9.

    The selected candidate must be able to provide proof of identity and eligibility to work in the United States consistent with the requirements of that form.

    https://www.uscis.gov/i-9-central/form-i-9-acceptable-documents

  • DOC does not use E-Verify; therefore, we are not eligible to extend STEM-Optional Practice Training (OPT). For information, please visit www.uscis.gov.


Telework Details

This position may be allocated for telework.

Work may be performed from your home or another offsite location within the state of Washington using a reliable internet or cellular hotspot service at that time.

Employees are expected to perform assigned duties in a safe manner, to take proper care all state-issued equipment, and maintain confidentiality of all information in possession while working offsite.

Employees will be required to commute to a Department of Corrections facility or field office as business requires, to potentially include components of the onboarding process.

Some offices will have a “drop in” area available, however, a dedicated workspace within a DOC facility will not be provided.


What We Offer:

As an employee of the Department of Corrections, your work-life integration is a priority.

Washington State employees are offered one of the most inclusive and competitive benefits packages in the nation.

Besides comprehensive family insurance for medical, dental, and vision, these perks also may include:

  • Remote/telework/flexible schedules (depending on position)
  • Up to 25 paid vacations days a year
  • 8 hours of paid sick leave per month
  • 12 paid holidays a year
  • Generous retirement plan
  • Flex Spending Accounts
  • Dependent Care Assistance
  • Deferred Compensation and so much more!


PERS: State Employees are members of the Washington Public Employees' Retirement System (PERS). New employees have the option of two employer contributed retirement programs. For additional information, check out the Department of Retirement Systems' web site.


For questions about this recruitment, or to request reasonable accommodation in the application process, please email mackenzie.conley@doc1.wa.gov or call us at 509-630-9160. For TTY service, please call the Washington Relay Service at 7-1-1 or 1-800-833-6388.

Check your resume before applying to catch common mistakes

Browse Similar Jobs

Posted on NEOGOV: 1/6/2026 | Added to FreshGovJobs: 1/7/2026

Source: NEOGOV | ID: neogov-washington-5188648