Chief Information Security Officer

Join the Texas Health and Human Services Commission (HHSC) and be part of a team committed to creating a positive impact in the lives of fellow Texans. At HHSC, your contributions matter, and we support you at each stage of your life and work journey. Our comprehensive benefits package includes 100% paid employee health insurance for full-time eligible employees, a defined benefit pension plan, generous time off benefits, numerous opportunities for career advancement and more. Explore more details on the Benefits of Working at HHS webpage.

Functional Title: Chief Information Security Officer

Job Title: Chief Info Security Officer

Agency: Health & Human Services Comm

Department: CHIEF INFO SECURITY OFFICE

Posting Number: 22815

Closing Date: 11/11/2026

Posting Audience: Internal and External

Occupational Category: Computer and Mathematical

Salary Range: $11,298.08 - $19,107.91

Pay Frequency: Monthly

Salary Group: TEXAS-B-32

Shift: Day

Additional Shift: Days (First)

Telework: Not Eligible for Telework

Travel: Up to 5%

Regular/Temporary: Regular

Full Time/Part Time: Full time

FLSA Exempt/Non-Exempt: Exempt

Facility Location:

Job Location City: AUSTIN

Job Location Address: 701 W 51ST ST

Other Locations: Austin

MOS Codes: 0605,0630,0631,0639,0670,0679,0681,1702,1705,1710,1720,1721,1799,2611,2659,8055,8858,14N,14NX,170A

170B,17A,17B,17C,17C0,17DX,17S,17SX,17X,181X,182X,183X,184X,1B4X1,1D7X1,255A,255N,255S,25B,25D,26A

26B,26Z,514A,5C0X1D,5C0X1N,5C0X1S,5I0,5IX,681X,682X,683X,781X,782X,783X,784X,CT,CTI,CTM,CTR,CWT

CYB10,CYB11,CYB12,CYB13,CYB14,IS,ISM,ISS,IT,ITS

Job Description:

The Texas Health and Human Services Commission (HHSC) is seeking an exceptional Chief Information Security Officer (CISO) to lead cybersecurity across one of the largest and most mission-critical public-sector technology environments in Texas.

The CISO will shape the future of cybersecurity across the HHS system, protecting critical services and sensitive information while enabling secure innovation and modernization. This executive will lead HHS in addressing emerging risks, including artificial intelligence, cloud transformation, third-party risk, and post-quantum cryptography.

Reporting to the Deputy Chief Operations Officer, the CISO serves as the executive leader for Cybersecurity Operations and Information Security Governance, Risk, & Compliance.

Cybersecurity Operations provides strategic oversight of cybersecurity operations, threat and vulnerability management, incident response, and recovery to protect critical systems and maintain operational resilience.

Governance, Risk, & Compliance directs enterprise information security governance, risk, compliance, security architecture, and modernization to protect agency information and ensure security is integrated across technology and operations..

Working alongside leaders of Procurement, Payroll, Human Resources, Facilities, and other critical operational functions, the CISO will exercise significant latitude for independent judgment and decision-making and may be asked to represent HHS on cybersecurity matters with state and federal agencies, the Office of the Governor, the Texas Legislature, and other external stakeholders.

The successful candidate will be a strategic executive who can translate cybersecurity risk into business decisions, build strong partnerships across the organization, and lead a mature cybersecurity program protecting sensitive health, benefits, operational, and agency information.

Essential Job Functions (EJFs):

1. Develops and establishes goals consistent with the agency's strategic plan and effectively achieves them

Servers as the agencies Designated Information Security Officer. Ensures cybersecurity objectives align with agency priorities, business operations, and risk management goals. Communicates complex cybersecurity risks and opportunities in business terms and provides regular briefings to executive leadership regarding security posture, emerging threats, compliance obligations, and investment priorities. Ensures information security risks are evaluated alongside operational, financial, regulatory, and strategic risks as part of enterprise decision-making. Leads development of long-term cybersecurity strategy, governance frameworks, and performance measures to support agency resiliency and mission success.

2. Maintains a positive customer service for those internal and external to the agency

Builds trusted partnerships with agency leadership, programs, technology teams, and external stakeholders to understand business needs and deliver practical, risk-based cybersecurity solutions. Promotes a service-oriented security culture that enables agency operations and modernization while protecting critical information and systems

3. Directs program activities and/or business functions within a department or division to ensure timely deliverables

Directs enterprise cybersecurity, risk management, and resilience activities to protect critical systems and ensure continuity of agency operations. Provides strategic oversight of cybersecurity operations, incident response, disaster recovery, security architecture, compliance, and emerging technologies, while ensuring security is integrated into technology planning, procurement, operations, and third-party relationships.

4. Effectively communicates status of work and identifies potential issues both up and down the chain of command and to appropriate adjacent areas inside and outside of the agency

Communicates cybersecurity priorities, status, risks, and emerging issues to executive leadership, staff, and key internal and external partners, ensuring timely escalation and coordination when action is required.

5. Develops policies, procedures, and guidelines; and monitors compliance

Directs the development, implementation, and oversight of policies, procedures, standards, and guidelines governing CISO operations and HHS information security for both internal and external use. Monitors compliance to ensure consistent and effective execution.

6. Develops, coaches, and trains staff to be effective members of the team and prepares them for success in their roles and career

Builds and develops a high-performing cybersecurity workforce through coaching, training, professional development, and succession planning to strengthen capabilities and prepare staff for continued growth and leadership.

Knowledge, Skills and Abilities (KSAs):

• Knowledge of enterprise cybersecurity strategy, governance, risk management, security operations, incident response, and applicable regulatory requirements in a large public-sector environment.
• Knowledge of state and federal cybersecurity frameworks and standards, including NIST guidance, Texas Administrative Code Chapter 202, the Texas Cybersecurity Framework, and risk-based security controls.
• Knowledge of information security governance, security architecture, technology risk management, data protection, identity and access management, cloud security, and emerging cybersecurity trends. Knowledge of business continuity, disaster recovery, vendor management, contract oversight, and third-party technology risk management.
• Skill in leading large, complex cybersecurity programs and developing enterprise security strategies, governance structures, policies, and measurable outcomes.
• Skill in translating cybersecurity risks into actionable business decisions and communicating effectively with executives, technical staff, public officials, auditors, and other stakeholders.
• Skill in building collaborative relationships and leading security assessments, risk analyses, incident response efforts, audits, and remediation activities.
• Skill in managing large-scale initiatives, budgets, contracts, competing priorities, and developing high-performing cybersecurity teams.
• Ability to provide visionary leadership, exercise sound judgment, and foster a proactive, risk-informed, and mission-focused security culture.
• Ability to balance security, compliance, operational needs, modernization efforts, and user experience while implementing effective solutions to complex challenges.
• Ability to anticipate and address evolving cybersecurity threats and risks and maintain the security, availability, and integrity of critical systems and information resources.
• Ability to exercise independent judgment, manage confidential information, and uphold the highest standards of ethics and professionalism.

Registrations, Licensure Requirements or Certifications:

Preference for professional certification such as:

• Certified Information Systems Security Professional (CISSP),
• Certified Information Security Manager (CISM),
• Certified Information Systems Auditor (CISA),
• Certified in Risk and Information Systems Control (CRISC),
• GIAC certification, or cloud security certification, or comparable advanced cybersecurity credentials.

Initial Screening Criteria:

• Graduation from an accredited four-year college or university with major coursework in cybersecurity, computer science, information technology, management information systems, engineering, public administration, business administration, or a related field. Relevant senior-level experience may be considered as a substitution for education.
• At least 10 years of progressively responsible experience in cybersecurity, information security, technology risk management, security operations, enterprise technology leadership, or a closely related field is required.
• Experience with cybersecurity frameworks, regulatory compliance, audit coordination, risk management, or security governance in a public-sector, healthcare, financial, critical infrastructure, or similarly regulated environment is required.
• Experience leading cybersecurity, information security, technology risk, or technical teams in a large, complex organization is preferred.
• Experience working in Health and Human Services agencies, Texas State Government, and Public sector are preferred in that order.

Additional Information:

N/A

Review our Tips for Success when applying for jobs at DFPS, DSHS and HHSC.

Active Duty, Military, Reservists, Guardsmen, and Veterans:

Military occupation(s) that relate to the initial selection criteria and registration or licensure requirements for this position may include, but not limited to those listed in this posting. All active-duty military, reservists, guardsmen, and veterans are encouraged to apply if qualified to fill this position. For more information please see the Texas State Auditor's Job Descriptions, Military Crosswalk and Military Crosswalk Guide at Texas State Auditors Office - Job Descriptions.

ADA Accommodations:

In compliance with the Americans with Disabilities Act (ADA), HHSC and DSHS agencies will provide reasonable accommodation during the hiring and selection process for qualified individuals with a disability. If you need assistance completing the on-line application, contact the HHS Employee Service Center at 1-888-894-4747. If you are contacted for an interview and need accommodation to participate in the interview process, please notify the person scheduling the interview.

Pre-Employment Checks and Work Eligibility:

Depending on the program area and position requirements, applicants selected for hire may be required to pass background and other due diligence checks.

HHSC uses E-Verify. You must bring your I-9 documentation with you on your first day of work. Download the I-9 Form

Telework Disclaimer:

This position may be eligible for telework. Please note, all HHS positions are subject to state and agency telework policies in addition to the discretion of the direct supervisor and business needs.