Job description

About WSDOT The Washington State Department of Transportation (WSDOT) is a multimodal agency with a global reputation for excellence. Our dedicated workforce plans, designs, builds, and operates an integrated transportation system that safely and efficiently moves people and goods throughout the state. In addition to maintaining over 20,000 lane miles of state highway and 4,100 bridges, WSDOT leads an award-winning Active Transportation Plan, manages the world's longest floating bridge, and operates the largest ferry system in the nation! The Opportunity WSDOT’s Technology Services Division (TSD) is seeking an experienced Information Technology Cybersecurity Manager to provide executive leadership and cybersecurity governance for Washington State Ferries (WSF), serving as the designated Cybersecurity Officer and leading the agency’s Maritime Cybersecurity Program. This position will establish cybersecurity strategy, governance, regulatory compliance, cyber risk management, incident preparedness, and organizational resilience across critical technology and maritime operational environments, ensuring cybersecurity requirements are integrated into agency operations, technology modernization, and critical maritime infrastructure. Our top candidates will be a strategic and collaborative leaders with strong cybersecurity governance, risk management, regulatory compliance, and exceptional communication and cross-functional leadership skills. What to Expect WSF provides transportation and transit services across two countries and multiple counties throughout the Puget Sound region and San Juan Islands. Within TSD, the WSF team supports the information technology systems, infrastructure, applications, and services used by more than 2,000 WSF employees and provides technology services across enterprise infrastructure, cybersecurity, cloud services, business applications, end-user computing, telecommunications, physical security, vendor management, procurement, and ferry operations. This position works within a complex, matrixed organization and provides functional cybersecurity leadership across WSF and WSDOT, coordinating with operational, technology, security, and marine leadership to direct cybersecurity priorities and advance a secure, resilient Maritime Cybersecurity Program. Among the varied range of responsibilities held within this role, the Cybersecurity Officer will: • Direct the development, implementation, maintenance, and continuous improvement of the Maritime Cybersecurity Plan. • Establish cybersecurity policies, standards, procedures, and governance processes supporting enterprise risk management and regulatory compliance. • Direct cybersecurity assessments, audits, inspections, and corrective action activities supporting organizational compliance. • Direct enterprise cybersecurity risk management activities, including risk identification, prioritization, evaluation, treatment, and executive risk communication. • Establish enterprise priorities for vulnerability management and cybersecurity risk mitigation. • Lead organizational response to significant cybersecurity incidents and serve in an Incident Command System (ICS) leadership role, as appropriate. • Establish enterprise cybersecurity requirements, standards, and implementation priorities supporting secure IT and operational technology environments. • Direct and coordinate with technology owners, engineering organizations, Digital Port Engineers, infrastructure teams, cybersecurity personnel, and operational stakeholders to integrate cybersecurity requirements into enterprise initiatives. Qualifications To be considered for this opportunity, the following competencies are required : • Cybersecurity Governance & Risk Management: Demonstrated knowledge of cybersecurity governance, enterprise risk management, information technology, operational technology, regulatory compliance, and recognized cybersecurity frameworks, including the NIST Cybersecurity Framework, NIST Special Publications, or equivalent industry standards. • Strategic Leadership: Demonstrated experience providing strategic leadership for enterprise cybersecurity, information technology, risk management, or related programs within a complex organization. • Cybersecurity Policy & Governance: Demonstrated experience developing and implementing cybersecurity policies, standards, governance frameworks, or strategic initiatives. • Communication: Demonstrated ability to communicate complex cybersecurity and technical information effectively to executive leadership, business stakeholders, regulatory agencies, and non-technical audiences. • Collaboration & Influence: Demonstrated ability to build collaborative relationships and influence cross-functional teams, stakeholders, contractors, and external partners without formal supervisory authority. • Risk Assessment & Decision Making: Demonstrated ability to assess organizational risk, establish priorities, evaluate alternatives, and make sound decisions in dynamic or high-pressure environments. • Incident Leadership & Organizational Resilience: Demonstrated ability to lead and coordinate cybersecurity incident response, recovery, and continuity activities to minimize operational impacts and strengthen organizational resilience. • Growth Mindset & Service-Oriented: Actively demonstrates a commitment to learning and growth and takes action to meet the needs of others. The following qualifications are also required : • A valid driver’s license and the ability to operate state-owned vehicles. • Ability to obtain a Transportation Worker Identification Credential (TWIC) card within the first six (6) months of employment. • Ability to respond to emergencies outside of normal business hours, including nights, weekends, and holidays as needed. It is preferred that qualified candidates also demonstrate/have: • Cybersecurity Certifications: Professional cybersecurity certification such as CISSP, CISM, GSLC, CGRC, or equivalent. • Maritime & Operational Technology: Demonstrated knowledge of maritime transportation systems, critical infrastructure, or Operational Technology (OT) environments. • Regulated Environments: Experience working within a regulated environment subject to cybersecurity, safety, or operational compliance requirements. • Specialized Knowledge: Specialized training, education or knowledge in cybersecurity, information technology, business administration, public administration, or a related field. Important Notes • This recruitment may also be used to fill additional positions per business needs. • This is a project position, expected to last until June 30, 2028. • The salary listed includes the legislative approved 5% salary premium for positions in King County. • This position requires travel to WSF vessels, terminals, maintenance facilities, WSDOT offices, and other locations in support of agency operations. Travel may also be required for training, conferences, and meetings. Occasional overnight travel may be necessary. • In addition to base salary, employees may be entitled to other forms of compensation depending on the type, duties, or location of the position. For union-represented positions, more information on other forms of compensation can be found in the applicable Collective Bargaining Agreements . Information on other compensation types for non-represented positions can be found in Chapter 357-28 of the Washington Administrative Code. • This position offers telework flexibility; however, the nature of the project requires a greater in-person presence. The incumbent will regularly work at WSF terminals, aboard vessels, and at office locations to become familiar with ferry operations, understand operational workflows, and collaborate with operational staff, technology teams, and project stakeholders. The balance of telework, office work, and field engagement will vary based on project activities and operational needs. • WSDOT does not use the E-Verify system, therefore we are not eligible to extend STEM Optional Practical Training (OPT). For more information, please visit www.uscis.gov Why WSDOT • Work-Life Balance – We are committed to ensure that our staff experience the reward of public service, while also sustaining a routine that suits each individuals’ lifestyle. As such, there are a number of flexible schedule options available, including telework options for eligible positions. • Paid Leave – In addition to 12 paid holidays, full-time employees earn up to 25 paid vacation days per year! • Tuition Assistance – Permanent employees have several options for assistance with education expenses, including tuition reimbursement programs, government discounts at participating colleges throughout the state, and eligibility for federal student loan forgiveness. • Plan For Your Future – WSDOT offers a comprehensive benefits package that includes a variety of healthcare options. Employees also have their choice of state retirement programs, and much more. Go to State Benefits for more information. How to Apply Applications for this recruitment will be accepted electronically. Your relevant experience may be evaluated to determine salary. Therefore, it is very important that the “Work Experience” portion of the application be completed in as much detail as possible. In order to be considered for this opportunity, please include the following with your online application: • An attached Resume outlining (in reverse chronological order) your experience to date. • An attached Cover Letter that further explains your qualifications and indicates why you believe you are a viable candidate for this role. • Contact details for a minimum of three (3) individuals who can attest to your work performance, technical skills, and job-related competencies. NOTE: This information may be entered in the “References” section of the online application; does not require an additional attachment. Please click the "APPLY" button to proceed. Note that you will be prompted to either sign in or create an account. This step is required in order to submit an application to this opportunity. WSDOT is an equal opportunity employer. We value the importance of creating an environment in which all employees can feel respected, included, and empowered to bring unique ideas to the agency. Our diversity and inclusion efforts include embracing different cultures, backgrounds and viewpoints while fostering growth and advancement in the workplace. All persons, regardless of race, ethnicity, age, veteran status, sexual orientation, and/ or gender identity, are encouraged to apply. Persons with disabilities needing assistance in the application process, or those needing this job announcement in an alternative format may contact the listed Recruiter. WSDOT does not use the E-Verify system, therefore we are not eligible to extend STEM Optional Practical Training (OPT). For more information, please visit www.uscis.gov Contact Us For inquiries about this posting, you may contact the assigned Recruiter at Robyn.Lovely@wsdot.wa.gov . Please be sure to reference 26DOT-HQ-0P437 in the subject line.

Requirements

Must-haves

What to Expect
Among the varied range of responsibilities held within this role, the Cybersecurity Officer will:
Direct the development, implementation, maintenance, and continuous improvement of the Maritime Cybersecurity Plan.
Establish cybersecurity policies, standards, procedures, and governance processes supporting enterprise risk management and regulatory compliance.
Direct cybersecurity assessments, audits, inspections, and corrective action activities supporting organizational compliance.
Direct enterprise cybersecurity risk management activities, including risk identification, prioritization, evaluation, treatment, and executive risk communication.
Establish enterprise priorities for vulnerability management and cybersecurity risk mitigation.
Lead organizational response to significant cybersecurity incidents and serve in an Incident Command System (ICS) leadership role, as appropriate.
Establish enterprise cybersecurity requirements, standards, and implementation priorities supporting secure IT and operational technology environments.
To be considered for this opportunity, the following competencies are required :
Strategic Leadership: Demonstrated experience providing strategic leadership for enterprise cybersecurity, information technology, risk management, or related programs within a complex organization.
Cybersecurity Policy & Governance: Demonstrated experience developing and implementing cybersecurity policies, standards, governance frameworks, or strategic initiatives.
Communication: Demonstrated ability to communicate complex cybersecurity and technical information effectively to executive leadership, business stakeholders, regulatory agencies, and non-technical audiences.
Collaboration & Influence: Demonstrated ability to build collaborative relationships and influence cross-functional teams, stakeholders, contractors, and external partners without formal supervisory authority.
Risk Assessment & Decision Making: Demonstrated ability to assess organizational risk, establish priorities, evaluate alternatives, and make sound decisions in dynamic or high-pressure environments.
Growth Mindset & Service-Oriented: Actively demonstrates a commitment to learning and growth and takes action to meet the needs of others.
A valid driver’s license and the ability to operate state-owned vehicles.
Ability to obtain a Transportation Worker Identification Credential (TWIC) card within the first six (6) months of employment.
Ability to respond to emergencies outside of normal business hours, including nights, weekends, and holidays as needed.
Cybersecurity Certifications: Professional cybersecurity certification such as CISSP, CISM, GSLC, CGRC, or equivalent.
Maritime & Operational Technology: Demonstrated knowledge of maritime transportation systems, critical infrastructure, or Operational Technology (OT) environments.
Regulated Environments: Experience working within a regulated environment subject to cybersecurity, safety, or operational compliance requirements.
Specialized Knowledge: Specialized training, education or knowledge in cybersecurity, information technology, business administration, public administration, or a related field.

Nice-to-haves

It is preferred that qualified candidates also demonstrate/have:

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: governmentjobs
Effort: medium

Benefits

Benefits detected in the listing.

Vision