Position Overview

The Illinois Department of Innovation and Technology (DoIT) is seeking an Information Security & Audit Compliance Section Manager to lead our team supporting the Illinois Department of Human Services (DHS). The DoIT Team at DHS is leading a transformation to modernize the way citizens interact with the State of Illinois agency responsible for providing a wide variety of services to Illinois residents. The DoIT team at DHS is seeking to hire a candidate with strong technical and people skills to serve as the Information Security & Audit Compliance Section Manager. The Information Security & Audit Compliance Section Manager is responsible for managing DHS state-wide information system security process. The successful candidate will need to be highly analytical, professional, communicate effectively, and possess excellent organizational skills. We invite candidates to join our professional IT team as we transform technology for the State of Illinois!

Job Responsibilities

• Serves as Section Manager of Information Security & Audit Compliance.
• Serves as full-line supervisor.
• Oversees internal and external audit processes related to DHS information systems.
• Individually and through subordinate staff, ensures correct application of processes used to approve or deny user requests for DHS-specific information systems access.
• Develops, monitors and implements information system security controls for system access across IDHS in accordance with DHS, DoIT, and other state/federal requirements.
• Performs other duties as assigned or required which are reasonably within the scope of duties enumerated above.

Minimum Qualifications

• Requires knowledge, skill and mental development equivalent to completion of four (4) years college preferably with major course work in computer science, Management Information Systems, Information Security or related Information Technology fields.
• Requires prior experience equivalent to four (4) years of progressively responsible administrative experience in Information Technology Audits and Security, working with the National Institute of Standards and Technology (NIST), Cyber Security Framework (CSF), NIST Risk Management Framework (RMF), Control Objectives for Information and Related Technologies (COBIT) framework, DoIT’s Enterprise Information Security Policies, Business Continuity and Disaster Recovery best practices, processes as defined by the Disaster Recovery Institute International (DRII), and/or similar standards.

Preferred Qualifications (in priority order)

• Certification in one or more of the following: Certified Information Systems Security Professional (CISSP – IPC (2)); Certified Information Security Manager (CISM - ISACA); Certified Information Systems Auditor (CISA – ISACA); Certified Business Continuity Professional (BCP – DRI International); Certified Authorization Professional (CAP); Certified Risk and Information Systems Control.
• Four (4) years of professional experience supervising professional information technology staff.
• Four (4) years of professional experience working with an information system security process for a public or private organization.
• Four (4) years of professional experience developing information system security policies and procedures for a large public or private organization.
• Four (4) years of professional experience working with internal and external information technology audits for a public or private organization.
• Four (4) years of professional experience interacting with and communicating in oral and written form, including teamwork, leadership, and conflict management skills.

Conditions of Employment

• Requires the ability to travel.
• Requires a valid driver’s license.
• Requires the ability to serve on-call.
• Ability to keep abreast of new developments in the Information Technology field.
• Requires the ability to pass a position specific, agency required background check.