Information Security Manager

Role: Information Security Manager

Duration: 6 Months

Location: Austin, TX (Hybrid-Candidates must be local to the Austin area)

Summary: The client is seeking an experienced Information Security Manager to provide senior-level leadership and strategic direction for the agency's cybersecurity, risk management, governance, and compliance programs. The work centers on enterprise security policies and controls, risk assessments, regulatory compliance, security initiatives, and advising executive leadership on information security matters. Strong candidates will have a background in security governance and risk management, experience applying frameworks such as NIST and CIS Controls, and ideally Texas state-government security experience. One or more industry certifications is required for this role (CISSP or CISM).

Required Skills:

• 7 Years of Required Experience working in a fast-paced environment with changing priorities.
• 6 Years of Required Experience in information security, cybersecurity, or information technology.
• 4 Years of Required Experience developing, implementing, or administering information security policies, standards, controls, risk management, or compliance programs.
• 4 Years of Required Experience leading security initiatives, projects, or cross-functional teams and presenting recommendations to management.
• 4 Years of Required Experience conducting security risk assessments, audits, compliance reviews, and remediation activities.
• 4 Years of Required Experience with security frameworks such as NIST and CIS Controls as well as governance compliances such as Texas Administrative Code 202, DIR and Cyber Command Security requirements, TX-RAMP, FedRAMP, and SOC2.

Preferred Skills:

• 5 Years of Preferred Experience working with State Government agencies
• 3 Years of Preferred Experience in coordinating/using vendor provided support.
• 3 Years of Preferred Experience serving as an Information Security Officer or equivalent security leadership role.
• 2 Years of Preferred Experience presenting cybersecurity, risk, or compliance matters to executive leadership and other stakeholders.
• 2 Years of Preferred Experience with business continuity, disaster recovery, third-party risk management, and cloud environments, including Microsoft Azure, Microsoft 365, and Entra ID.