Senior Cybersecurity Specialist

The State of Missouri is seeking a Senior Cybersecurity Specialist to strengthen enterprise risk management and statewide security practices. This onsite role supports the Office of Cyber Security through the Office of Administration, Information Technology Services Division (OA-ITSD), working across agencies to improve compliance, third-party risk oversight, and cyber readiness.

In this position, you will guide a team of risk and compliance professionals while partnering with agency leadership to assess security risks and support secure technology adoption across Missouri.

Key Responsibilities

• Partner with diverse state agencies to navigate complex audits and maintain ongoing alignment with leading frameworks, including NIST CSF, SOC 2, CJIS, HIPAA, and IRS Pub 1075.
• Help mature the statewide third-party risk management framework by evaluating vendor security practices, cloud architectures, and software integrations to protect the state’s digital supply chain.
• Oversee security risk assessments across legacy infrastructure, proposed digital systems, and emerging technologies, converting complex findings into actionable, business-friendly guidance for agency leaders.
• Drive enterprise-wide security training and phishing simulation programs, including the vision, implementation approach, and metrics to support a culture of digital vigilance across agencies.
• Lead and support a dedicated team of risk and compliance specialists, promoting an inclusive environment focused on professional growth and operational excellence.
• Consult with agency directors, procurement teams, and cabinet members on security risks to enable secure technology adoption, not only compliance enforcement.

Required Qualifications

• Bachelor’s or associate degree related to Computer Information Systems, or an equivalent substitution based on applicable experience.
• Strong leadership and relationship management skills that promote team development, collaborative consulting, and effective executive communication.
• Governance, Risk and Compliance expertise, including strong understanding of security frameworks and compliance standards such as NIST CSF, NIST SP 800-53, HIPAA, CJIS, and IRS Pub 1075.
• Understanding of third-party risk, including the ability to evaluate vendor security controls and assess contract terms for risk.
• Ability to perform technical evaluations and identify risks in SOC reports, penetration testing summaries, and architectural diagrams.
• Experience rolling out modern, engaging security awareness training and social engineering simulations, with the ability to track metrics to measure effectiveness.
• Preferred certifications: CRISC, CISM, CISSP, CISA.
• Successful background check results are required, which may include checks using a candidate’s name and/or fingerprints and other screenings depending on the specific position.

Technologies and Frameworks

• NIST CSF, SOC 2, CJIS, HIPAA, IRS Pub 1075
• NIST SP 800-53
• CRISC, CISM, CISSP, CISA

Compensation and Benefits

• Salary: USD 91,220 - 110,643 per year (base pay rate).
• Defined pension plan.
• Generous amounts of leave and holiday time.
• Eligibility for health insurance coverage.
• If eligible, pay differentials (such as shift, security, or years of service) may be added to total compensation; a pay differential does not increase base pay.

Work Location

The office for this position is located at the MoDot Annex (MSHP), 601 W Main St Jefferson City, MO 65101.

Authorization to Work in the United States

• Authorization to work in the United States is a prerequisite of employment.
• The Office of Administration, Information Technology Services Division (ITSD) will not sponsor applicants for work visas.

Application Details

• Applications are accepted for a minimum of fourteen days. After this period, the posting will remain active until the position is filled.
• If you have questions or need accommodations to participate in the application or interview process, contact [email protected].