Primary Purpose:
Under the general direction of the ESC Executive Director or designee, the Information Security Officer is to provide vision and leadership for developing and supporting security initiatives for the participating partners of Education Service Centers (ESCs). The Information Security Officer will also be responsible for assisting in developing and delivering comprehensive information security and privacy programs for participating Education Service Centers (ESCs). The scope of this position includes information in digital,
print, and other formats. The purpose of the position is to raise awareness of information security among participating ESCs, improve the overall protection from external and internal threats to participating ESCs, to ensure that the ESCs are in compliance with statutory and regulatory requirements regarding information access, security, and privacy, and to assist ESCs in building a culture which promotes security in the handling of data and use of technology.
Qualifications:
Education/Certification:
? Bachelor’s degree required
? Advanced degree preferred
Special Knowledge/Skills/Experience/Physical Demands:
? A minimum of three to five years of experience in information security is required
? Strong organizational, communication, and interpersonal skills are required
? Demonstrated skills in writing, editing, and public speaking
? Ability to implement policy and procedures is required
? Ability to interpret data is required
? Must have the ability to work collaboratively with a diverse group of people
? Occasional prolonged and irregular hours
? Ability to perform required travel to participating ESCs across the state

Location: 

This position is full remote. The home base location will be at the nearest colloborating ESC.

Major Responsibilities and Duties:
1. Serves as a representative of participating ESCs, displaying courtesy, tact, consideration, and discretion in all interactions with other members of the educational communities, governmental agencies, and with the public.
2. Participates as a senior management team member in governance processes related to security strategies for participating ESCs.
3. Assists with the development of an industry-acceptable set of information security policies and procedures in association with participating ESCs.
4. Aids participating ESCs in with the implementation of information security policies and procedures.
5. Coordinates information security compliance activities between the Texas Education Agency and participating ESCs when necessary.
6. Leads and assists ESCs with TEA-mandated DIR security assessments.
7. Performs internal audits of ESC Information Systems regarding information security and in relation to the DIR Information Security Framework. Uploads state-required ESC Information Security data into the DIR portal.
8. Ensures security policies and procedures for participating ESCs comply with state and federal standards.
9. Provides direct information security training to each participating ESC when necessary.
10. Consults with each participating ESC regarding compliance with the organization's security policies and procedures among employees, contractors, alliances, and other third parties and assist in taking corrective action when necessary.
11. Manages information security incident response.

12. Coordinates efforts between TEA and ESC’s technical teams to review and improve individual information security plans.
13. Performs information security risk analysis and periodic information system activity reviews for information security processes.
14. Assists with designing and implementing disaster recovery and business continuity plans, procedures, audits, and enhancements as necessary.
15. Works closely with the participating ESCs on enterprise technology development to fully secure information, computer, network, and processing systems where necessary.
16. Serves as an internal information security consultant to participating ESCs.
17. Serves as an ex-officio member of the TASI group of ESC technology directors.
18. Monitors advancements in information security technologies.
19. Monitors changes in legislation and accreditation standards that affect information security.
20. Initiates facilitates, and promotes activities that foster information security awareness in participating ESCs.
21. Serves as an information security point of contact for participating ESCs. Provides technical assistance where needed for information security products and monitoring systems.
22. Assists ESC Vendors of cloud products with the TX-RAMP program.
23. Travels to each participating ESC no less than once yearly for face-to-face meetings with technology teams and/or administration. The participating ESCs are currently located in Amarillo, Austin, Beaumont, Mt. Pleasant, Kilgore, El Paso, Huntsville, Lubbock, Midland, Richardson, San Angelo, Victoria, Waco, and Wichita Falls.
24. Maintains a functioning cell phone and is accessible through this phone as deemed appropriate by the Executive Director. A functional cell phone means that it is charged, activated, messages checked, and mailbox emptied regularly.
25. Reports for work ready to perform responsibilities.
27. Maintains a professional level of confidentiality regarding all ESC matters.
29. Upholds and adheres to safety rules and policies of the ESC safety program.
30. Performs professional responsibilities as required by ESC policies, processes, and procedures.