Cybersecurity Officer (IT Security - Manager)

Cybersecurity Officer (IT Security - Manager)

Salary

$114,987.00 - $154,627.00 Annually

Location

King County - Seattle - Belltown, WA

Job Type

Project (limited duration)

Remote Employment

Flexible/Hybrid

Job Number

26DOT-HQ-0P437

Department

Dept. of Transportation

Division

Headquarters

Opening Date

10/19/2026

Closing Date

10/28/2026 11:59 PM Pacific

• Description
• Benefits
• Questions

Description

About WSDOT

The Washington State Department of Transportation (WSDOT) is a multimodal agency with a global reputation for excellence. Our dedicated workforce plans, designs, builds, and operates an integrated transportation system that safely and efficiently moves people and goods throughout the state. In addition to maintaining over 20,000 lane miles of state highway and 4,100 bridges, WSDOT leads an award-winning Active Transportation Plan, manages the worlds longest floating bridge, and operates the largest ferry system in the nation!

The Opportunity

WSDOT's Technology Services Division (TSD) is seeking an experienced Information Technology Cybersecurity Manager to provide executive leadership and cybersecurity governance for Washington State Ferries (WSF), serving as the designated Cybersecurity Officer and leading the agency's Maritime Cybersecurity Program. This position will establish cybersecurity strategy, governance, regulatory compliance, cyber risk management, incident preparedness, and organizational resilience across critical technology and maritime operational environments, ensuring cybersecurity requirements are integrated into agency operations, technology modernization, and critical maritime infrastructure. Our top candidates will be a strategic and collaborative leaders with strong cybersecurity governance, risk management, regulatory compliance, and exceptional communication and cross-functional leadership skills.

What to Expect

WSF provides transportation and transit services across two countries and multiple counties throughout the Puget Sound region and San Juan Islands. Within TSD, the WSF team supports the information technology systems, infrastructure, applications, and services used by more than 2,000 WSF employees and provides technology services across enterprise infrastructure, cybersecurity, cloud services, business applications, end-user computing, telecommunications, physical security, vendor management, procurement, and ferry operations. This position works within a complex, matrixed organization and provides functional cybersecurity leadership across WSF and WSDOT, coordinating with operational, technology, security, and marine leadership to direct cybersecurity priorities and advance a secure, resilient Maritime Cybersecurity Program.

Among the varied range of responsibilities held within this role, the Cybersecurity Officer will:

• Direct the development, implementation, maintenance, and continuous improvement of the Maritime Cybersecurity Plan.
• Establish cybersecurity policies, standards, procedures, and governance processes supporting enterprise risk management and regulatory compliance.
• Direct cybersecurity assessments, audits, inspections, and corrective action activities supporting organizational compliance.
• Direct enterprise cybersecurity risk management activities, including risk identification, prioritization, evaluation, treatment, and executive risk communication.
• Establish enterprise priorities for vulnerability management and cybersecurity risk mitigation.
• Lead organizational response to significant cybersecurity incidents and serve in an Incident Command System (ICS) leadership role, as appropriate.
• Establish enterprise cybersecurity requirements, standards, and implementation priorities supporting secure IT and operational technology environments.
• Direct and coordinate with technology owners, engineering organizations, Digital Port Engineers, infrastructure teams, cybersecurity personnel, and operational stakeholders to integrate cybersecurity requirements into enterprise initiatives.

Qualifications

To be considered for this opportunity, the following competencies are required:

• Cybersecurity Governance & Risk Management: Demonstrated knowledge of cybersecurity governance, enterprise risk management, information technology, operational technology, regulatory compliance, and recognized cybersecurity frameworks, including the NIST Cybersecurity Framework, NIST Special Publications, or equivalent industry standards.
• Strategic Leadership: Demonstrated experience providing strategic leadership for enterprise cybersecurity, information technology, risk management, or related programs within a complex organization.
• Cybersecurity Policy & Governance: Demonstrated experience developing and implementing cybersecurity policies, standards, governance frameworks, or strategic initiatives.
• Communication: Demonstrated ability to communicate complex cybersecurity and technical information effectively to executive leadership, business stakeholders, regulatory agencies, and non-technical audiences.
• Collaboration & Influence: Demonstrated ability to build collaborative relationships and influence cross-functional teams, stakeholders, contractors, and external partners without formal supervisory authority.
• Risk Assessment & Decision Making: Demonstrated ability to assess organizational risk, establish priorities, evaluate alternatives, and make sound decisions in dynamic or high-pressure environments.
• Incident Leadership & Organizational Resilience: Demonstrated ability to lead and coordinate cybersecurity incident response, recovery, and continuity activities to minimize operational impacts and strengthen organizational resilience.
• Growth Mindset & Service-Oriented: Actively demonstrates a commitment to learning and growth and takes action to meet the needs of others.

The following qualifications are also required:

• A valid driver's license and the ability to operate state-owned vehicles.
• Ability to obtain a Transportation Worker Identification Credential (TWIC) card within the first six (6) months of employment.
• Ability to respond to emergencies outside of normal business hours, including nights, weekends, and holidays as needed.

It is preferred that qualified candidates also demonstrate/have:

• Cybersecurity Certifications: Professional cybersecurity certification such as CISSP, CISM, GSLC, CGRC, or equivalent.
• Maritime & Operational Technology: Demonstrated knowledge of maritime transportation systems, critical infrastructure, or Operational Technology (OT) environments.
• Regulated Environments: Experience working within a regulated environment subject to cybersecurity, safety, or operational compliance requirements.
• Specialized Knowledge: Specialized training, education or knowledge in cybersecurity, information technology, business administration, public administration, or a related field.

Important Notes

• This recruitment may also be used to fill additional positions per business needs.
• This is a project position, expected to last until June 30, 2028.
• The salary listed includes the legislative approved 5% salary premium for positions in King County.
• This position requires travel to WSF vessels, terminals, maintenance facilities, WSDOT offices, and other locations in support of agency operations. Travel may also be required for training, conferences, and meetings. Occasional overnight travel may be necessary.
• In addition to base salary, employees may be entitled to other forms of compensation depending on the type, duties, or location of the position. For union-represented positions, more information on other forms of compensation can be found in the applicable Collective Bargaining Agreements. Information on other compensation types for non-represented positions can be found in Chapter 357-28 of the Washington Administrative Code.
• This position offers telework flexibility; however, the nature of the project requires a greater in-person presence. The incumbent will regularly work at WSF terminals, aboard vessels, and at office locations to become familiar with ferry operations, understand operational workflows, and collaborate with operational staff, technology teams, and project stakeholders. The balance of telework, office work, and field engagement will vary based on project activities and operational needs.
• WSDOT does not use the E-Verify system, therefore we are not eligible to extend STEM Optional Practical Training (OPT). For more information, please visit www.uscis.gov

Why WSDOT

• Work-Life Balance - We are committed to ensure that our staff experience the reward of public service, while also sustaining a routine that suits each individuals' lifestyle. As such, there are a number of flexible schedule options available, including telework options for eligible positions.
• Paid Leave - In addition to 12 paid holidays, full-time employees earn up to 25 paid vacation days per year!
• Tuition Assistance - Permanent employees have several options for assistance with education expenses, including tuition reimbursement programs, government discounts at participating colleges throughout the state, and eligibility for federal student loan forgiveness.
• Plan For Your Future - WSDOT offers a comprehensive benefits package that includes a variety of healthcare options. Employees also have their choice of state retirement programs, and much more. Go to State Benefits for more information.

How to Apply

Applications for this recruitment will be accepted electronically. Your relevant experience may be evaluated to determine salary. Therefore, it is very important that the "Work Experience" portion of the application be completed in as much detail as possible.

In order to be considered for this opportunity, please include the following with your online application:

• An attached Resume outlining (in reverse chronological order) your experience to date.
• An attached Cover Letter that further explains your qualifications and indicates why you believe you are a viable candidate for this role.
• Contact details for a minimum of three (3) individuals who can attest to your work performance, technical skills, and job-related competencies. NOTE: This information may be entered in the "References" section of the online application; does not require an additional attachment.

Please click the "APPLY" button to proceed. Note that you will be prompted to either sign in or create an account. This step is required in order to submit an application to this opportunity.

WSDOT is an equal opportunity employer. We value the importance of creating an environment in which all employees can feel respected, included, and empowered to bring unique ideas to the agency. Our diversity and inclusion efforts include embracing different cultures, backgrounds and viewpoints while fostering growth and advancement in the workplace. All persons, regardless of race, ethnicity, age, veteran status, sexual orientation, and/ or gender identity, are encouraged to apply. Persons with disabilities needing assistance in the application process, or those needing this job announcement in an alternative format may contact the listed Recruiter.

WSDOT does not use the E-Verify system, therefore we are not eligible to extend STEM Optional Practical Training (OPT). For more information, please visit www.uscis.gov

Contact Us

For inquiries about this posting, you may contact the assigned Recruiter at Robyn.Lovely@wsdot.wa.gov. Please be sure to reference 26DOT-HQ-0P437 in the subject line.

More than Just a Paycheck!

Employee benefits are not just about the kind of services you get, they are also about how much you may have to pay out of pocket. Washington State offers one of the most competitive benefits packages in the nation.

We understand that your life revolves around more than just your career. Like everyone, your first priority is ensuring that you and your family will maintain health and financial security. Thats why choice is a key component of our benefits package. We have a selection of health and retirement plans, paid leave, staff training and other compensation benefits that you can mix and match to meet your current and future needs.

Read about our benefits:

The following information describes typical benefits available for full-time employees who are expected to work more than six months. Actual benefits may vary by appointment type or be prorated for other than full-time work (e.g. part-time); view the job posting for benefits details for job types other than full-time.

Note: If the position offers benefits which differ from the following, the job posting should include the specific benefits.

Insurance Benefits

Employees and their families are covered by medical (including vision), dental and basic life insurance. There are multiple medical plans with affordable monthly premiums that offer coverage throughout the state.

Staff are eligible to enroll each year in a medical flexible spending account which enables them to use tax-deferred dollars toward their health care expenses. Employees are also covered by basic life and long-term disability insurance, with the option to purchase additional coverage amounts.

To view premium rates, coverage choice in your area and how to enroll, please visit the Public Employees Benefits Board (PEBB) website. The Washington Wellness program from the Health Care Authority works with PEBB to support our workplace wellness programs.

Dependent care assistance allows the employee to save pre-tax dollars for a child or elder care expenses.

Other insurance coverage for auto, boat, home, and renter insurance is available through payroll deduction.

The Washington State Employee Assistance Program promotes the health and well-being of employees.

Retirement and Deferred Compensation

State Employees are members of the Washington Public Employees Retirement System (PERS). New employees have the option of two employer contributed retirement programs. For additional information, check out the Department of Retirement Systems web site.

Employees also have the ability to participate in the Deferred Compensation Program (DCP). This is a supplemental retirement savings program (similar to an IRA) that allows you control over the amount of pre-tax salary dollars you defer as well as the flexibility to choose between multiple investment options.

Social Security

All state employees are covered by the federal Social Security and Medicare systems. The state and the employee pay an equal amount into the system.

Public Service Loan Forgiveness

If you are employed by a government or not-for-profit organization, and meet the qualifying criteria, you may be eligible to receive student loan forgiveness under the Public Service Loan Forgiveness Program.

Holidays

Full-time and part-time employees are entitled to paid holidays and one paid personal holiday per calendar year.

Note: Employees who are members of certain Unions may be entitled to additional personal leave day(s), please refer to position specific Collective Bargaining Agreements for more information.

Full-time employees who work full monthly schedules qualify for holiday compensation if they are employed before the holiday and are in pay status for at least 80 nonovertime hours during the month of the holiday; or for the entire work shift preceding the holiday.

Part-time employees who are in pay status during the month of the holiday qualify for the holiday on a pro-rata basis. Compensation for holidays (including personal holiday) will be proportionate to the number of hours in pay status in the month to that required for full-time employment, excluding all holiday hours. Pay status includes hours worked and time on paid leave.

Sick Leave

Full-time employees earn eight hours of sick leave per month. Overtime eligible employees who are in pay status for less than 80 hours per month, earn a monthly proportionate to the number of hours in pay status, in the month to that required for full-time employment. Overtime exempt employees who are in pay status for less than 80 hours per month do not earn a monthly accrual of sick leave.

Sick leave accruals for part-time employees will be proportionate to the number of hours in pay status, in the month to that required for full-time employment. Pay status includes hours worked, time on paid leave and paid holiday.

Vacation (Annual Leave)

Full-time employees accrue vacation leave at the rates specified in WAC 357-31-165(1) or the applicable collective bargaining agreement (CBA). Full-time employees who are in pay status for less than 80 nonovertime hours in a month do not earn a monthly accrual of vacation leave.

Part-time employees accrue vacation leave hours in accordance with WAC 357-31-165(1) or the applicable collective bargaining agreement (CBA) on a pro rata basis. Vacation leave accrual will be proportionate to the number of hours in pay status, in the month to that required for full-time employment.

Pay status includes hours worked, time on paid leave and paid holiday.

As provided in WAC 357-58-175, an employer may authorize a lump-sum accrual of vacation leave or accelerate the vacation leave accrual rate to support the recruitment and/or retention of a candidate or employee for a Washington Management Service position. Vacation leave accrual rates may only be accelerated using the rates established WAC 357-31-165.

Note: Most agencies follow the civil service rules covering leave and holidays for exempt employees even though there is no requirement for them to do so. However, agencies are required to adhere to the applicable RCWs pertaining holidays and leave.

Military Leave

Washington State supports members of the armed forces with 21 days paid military leave per year.

Bereavement Leave

Most employees whose family member or household member dies, or for loss of pregnancy, are entitled to five (5) days of paid bereavement leave. In addition, the employer may approve other available leave types for the purpose of bereavement leave.

Additional Leave

Leave Sharing

Parental Leave

Family and Medical Leave Act (FMLA)

Leave Without Pay

Please visit the State HR Website for more detailed information regarding benefits.

Updated 01-07-2026

01

This is a temporary project position expected to last until June 30, 2028. Are you willing to accept a temporary position?

• Yes
• No

02

Please describe your experience applying cybersecurity governance, enterprise risk management, information technology, operational technology, regulatory compliance, and recognized cybersecurity frameworks. Include the scope of your responsibilities, and the frameworks or standards applied. If you do not have this experience, please enter N/A.

03

Cybersecurity Governance & Risk Management: Which best describes your experience applying cybersecurity governance, enterprise risk management, information technology, operational technology, regulatory compliance, and recognized cybersecurity frameworks?

• I have led the development, implementation, and oversight of enterprise cybersecurity governance and risk management programs across information technology and/or operational technology environments, including regulatory compliance and cybersecurity frameworks.
• I have independently applied cybersecurity governance, risk management, regulatory requirements, and recognized cybersecurity frameworks to support organizational programs or initiatives.
• I have supported the application of cybersecurity governance, risk management, regulatory requirements, or recognized cybersecurity frameworks within an organization.
• I have knowledge of cybersecurity governance, risk management, regulatory compliance, and recognized cybersecurity frameworks but limited experience applying them in an organizational setting.

04

Strategic Leadership: Which best describes your experience providing strategic leadership for enterprise cybersecurity, information technology, risk management, or related programs within a complex organization?

• I have provided executive-level strategic leadership for enterprise cybersecurity, information technology, risk management, or related programs, establishing organizational direction and aligning initiatives with business or agency priorities.
• I have led significant cybersecurity, information technology, risk management, or related programs and provided strategic direction across multiple teams or organizational functions.
• I have led projects, initiatives, or teams within cybersecurity, information technology, risk management, or a related area and contributed to strategic planning and decision-making.
• I have participated in cybersecurity, information technology, risk management, or related initiatives but have not provided strategic leadership.

05

Cybersecurity Policy & Governance: Which best describes your experience developing and implementing cybersecurity policies, standards, governance frameworks, or strategic initiatives?

• I have led the development, implementation, and ongoing oversight of enterprise cybersecurity policies, standards, governance frameworks, or strategic initiatives.
• I have independently developed and implemented cybersecurity policies, standards, governance processes, or strategic initiatives within an organization.
• I have contributed to the development or implementation of cybersecurity policies, standards, governance processes, or strategic initiatives.
• I have knowledge of cybersecurity policies, standards, and governance practices but limited experience developing or implementing them.

06

Please describe your experience developing and implementing cybersecurity policies, standards, governance frameworks, or strategic initiatives. Include your specific role, and the policies or frameworks developed or implemented. If you do not have this experience, please enter N/A.

07

Incident Leadership & Organizational Resilience: Which best describes your experience leading and coordinating cybersecurity incident response, recovery, continuity, or organizational resilience activities?

• I have led enterprise cybersecurity incident response, recovery, continuity, or resilience activities involving multiple organizational functions and stakeholders, including executive leadership or external partners.
• I have independently coordinated cybersecurity incident response, recovery, continuity, or resilience activities within an organization.
• I have participated in cybersecurity incident response, recovery, continuity, or resilience activities as a team member or subject matter resource.
• I have knowledge of cybersecurity incident response and organizational resilience practices but limited direct experience applying them.

08

Please describe your experience leading or coordinating cybersecurity incident response, recovery, continuity, or organizational resilience activities. Include the nature of the incident or situation and your role, the teams or stakeholders involved. If you do not have this experience, please enter N/A.

09

Do you have a valid drivers license?

• Yes
• No

10

Do you currently have a valid TWIC card?

• Yes
• No

11

Are you able and willing to respond to emergencies outside of normal business hours, including nights, weekends, and holidays, as needed?

• Yes
• No

12

Do you hold a professional cybersecurity certification such as CISSP, CISM, GSLC, CGRC, or an equivalent certification? If yes, please identify the certification(s). If no, please enter N/A.

13

Maritime & Operational Technology: Which best describes your experience with maritime transportation systems, critical infrastructure, or OT environments?

• I have led cybersecurity, technology, risk management, or related programs involving maritime transportation systems, critical infrastructure, and/or complex OT environments.
• I have directly supported cybersecurity, technology, risk management, or related activities involving maritime transportation systems, critical infrastructure, and/or OT environments.
• I have worked with or have knowledge of maritime transportation systems, critical infrastructure, or OT environments but have limited direct experience supporting these environments.
• I have no direct experience with maritime transportation systems, critical infrastructure, or OT environments.

14

Regulated Environments: Which best describes your experience working within a regulated environment subject to cybersecurity, safety, or operational compliance requirements?

• I have led programs or initiatives within highly regulated environments and been responsible for ensuring compliance with cybersecurity, safety, operational, or related regulatory requirements.
• I have independently worked within a regulated environment and applied cybersecurity, safety, operational, or related compliance requirements to programs or activities.
• I have supported work within a regulated environment and contributed to meeting cybersecurity, safety, operational, or related compliance requirements.
• I have limited experience working within a regulated environment.

15

Please select the response that best describes your highest level of completed education.

• I have a master's degree or higher.
• I have a bachelor's degree.
• I have an associate's degree.
• I have a high school diploma or equivalent.
• None of the above

16

If you indicated completion of a degree, please list your degree and field of study. Otherwise, enter N/A.

17

How did you learn of this employment opportunity?

• Indeed
• LinkedIn
• Direct Email Notification
• WSDOT social media (Twitter, Facebook, YouTube, etc)
• Career Fair
• Monster
• WorkSource
• Handshake
• AASHTO
• NACTO
• COMTO
• APWA
• "NOW HIRING" banner/sign
• Radio advertisement
• WSDOT Employment Site
• Careers.wa.gov
• governmentjobs.com
• Other (specify below)

18

If you selected Other on the previous question, please specify how you learned of this employment opportunity in the space provided:

Required Question

Employer State of Washington

Address View Job Posting for Agency Information

View Job Posting for Location, Washington, 98504

Website http://www.careers.wa.gov