Information Security Manager

Key Responsibilities and Duties :

• Guide security policy and participate in broader Information Security governance efforts.
• Develop and maintain the Information Security Management System (ISMS) in collaboration with regional information security SMEs and technical consultants.
• Oversee and manage the ISMS and recommend appropriate mitigating controls.
• Oversees Information Security Risk Management activities, including risk identification, assessment, and communication to relevant interest holders.
• Provide valuable expertise and leadership directly to the governing Joint Board executive leadership, including sharing metrics to reflect the performance of the regional security program functions, executive risk score reports, and other guidance on a variety of information security topics.
• Facilitate a committee of Information Security SMEs across the Agencies to ensure both regional compliance and concurrence on information security-related matters, recommending solutions, and working from the regional perspective to achieve optimal solutions.
• Collaborate with the Systems Integrator, other vendors, and partner Agencies to ensure security best practices, standards, policies, and regulatory requirements are incorporated into core payment system design, implementation, and sustainment, as well as support other future phase projects.
• Conduct regular security reviews of both software and processes, advising on information security practices. Reviews and creates threat models and recommends security enhancements consistent with information security strategy and evolving threats.
• Support external IT security audits and assessments that focus on operation.
• Develop, update, implement, and conduct information security training programs to support the ISMS objectives.
• Manage approvals for Identity and Access Management (IAM) and Access Control Administration.
• Act as Incident Commander for Security Incident Response activities, whenever the Information Security Incident Response Plan is invoked by the regional program; play an interest holder and oversight role if the plan is invoked by other partners or vendors.
• Participate in information security incident investigation and response efforts; perform root-cause analysis when incidents occur and prepare incident reports.
• Evaluate change requests to determine potential impacts to Information Security, including IT systems, processes, policies, and provide appropriate input to the Change Management process.
• Coach future Regional Operations Team (ROOT) information security personnel as the ISMS becomes complete and mature.
• Keep up to date on latest information security trends, "best practices", threats, and countermeasures.

Required Skills and Qualifications :

Required Certifications or Licenses :

Certified Information Systems Security Professional (CISSP).

Preferred Skills and Qualifications :

Duration : 11 / 07 / 2025 to 2 / 28 / 2026

Location : Downtown Seattle (Hybrid)

M-F : 8 AM to 5 PM

Hybrid : 3 days work onsite

Pay : $75 per hour