Required Skills & Experience
8+ years of information security, cybersecurity, cloud security, security engineering, infrastructure, or software development experience 3+ years of leadership experience managing security or technology teams Hands-on experience in security engineering, cloud architecture, infrastructure, or software development Experience implementing DevSecOps and security automation practices Knowledge of NIST 800-53, IRS Publication 1075, CIS Controls, and related frameworks Experience evaluating and managing enterprise technology risk Strong communication and stakeholder management skills Proven success building and developing teams
Nice to Have Skills & Experience
Previous CISO, Deputy CISO, Security Director, or Security Engineering leadership experience Experience implementing compliance-as-code initiatives Experience with cloud-native security and zero-trust architectures Government, tax, financial services, or healthcare experience CISSP, CISM, CCSP, or related certifications Lean, Agile, or Continuous Improvement experience
Responsibilities:
Lead the enterprise information security program and cybersecurity strategy Protect taxpayer data and ensure compliance with regulatory requirements Develop and implement cloud, application, infrastructure, and operational security programs Integrate security practices into software development and deployment lifecycles Establish and mature DevSecOps and security automation capabilities Drive security modernization initiatives including zero-trust and cloud-native security architectures Partner with technology teams to remove friction and enable secure delivery Communicate security risks and recommendations to executives, business leaders, and technical teams Build, mentor, and develop security professionals Support STARS modernization, cloud transformation, and AI initiatives Strengthen security culture through collaboration, education, and coaching
Job Description
Our client is seeking a transformational security leader to serve as its Chief Information Security Officer. This individual will lead the agency's information security program and help modernize cybersecurity practices while protecting highly sensitive taxpayer and financial information. The role requires a leader who can balance security, compliance, innovation, and delivery. ADOR is specifically seeking a leader who operates as the "Department of How" rather than the "Department of No." This position will partner closely with technology, engineering, and business teams to implement modern security controls, automation, DevSecOps practices, compliance-as-code initiatives, and risk-based decision making. The ideal candidate combines strong technical credibility with coaching, collaboration, and change leadership capabilities.