The position of “state chief information security officer” is created. The security officer shall be a classified position in accordance with rules promulgated pursuant to the Personnel Act [N.M. Stat. Ann. Chapter 10, Article 9].