Chief Information Security, Compliance and Risk Officer​/CISO

Chief Information Security, Compliance and Risk Officer / CISO

Classification: Administrator III

Department: The Division of Information Technology (IT) strives to be a strategic, innovative, and best-in-class IT organization that provides a leading-edge technology environment for students, faculty, and staff to advance the University's mission, vision, and goals. We are seeking an exceptional individual to join our IT Information Security department as the Chief Information Security, Compliance and Risk Officer/CISO (Administrator III). The ideal candidate in this role should have a positive attitude, an active, energetic mind, and a leadership style that is characterized by highly ethical practices and a commitment to inclusivity, openness, flexibility, integrity, and kindness.

Salary Range: $14,500 - $17,700 per month

Work Schedule: Monday - Friday, 8:00 AM - 5:00 PM; occasional early morning, evening and/or weekend hours.

• Bachelor's degree from an accredited four-year college or university in computer science, information systems, cybersecurity, public administration, business administration, or a related field. Eight or more years of progressively responsible experience in information security, cyber risk, or IT compliance, including significant leadership experience managing teams and programs.
• Demonstrated experience setting strategic direction and roadmap for a cybersecurity, compliance, or risk program in a complex, multi-stakeholder environment.
• Demonstrated knowledge of information security and privacy regulations and frameworks applicable to higher education (e.g., Family Educational Rights and Privacy Act (FERPA), Health Insurance Portability and Accountability Act (HIPAA), Gramm-Leach-Bliley Act (GLBA), Payment Card Industry Data Security Standard (PCI DSS), California Consumer Privacy Act (CCPA), General Data Protection Regulation (GDPR), National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF), NIST 800-53, International Organization for Standardization (ISO) 27001).
• Experience leading or supporting cybersecurity incident response at an executive level, including coordination with legal, communications, and external partners.
• Demonstrated ability to translate complex technical, policy, and regulatory concepts into clear guidance for executive leadership and non-technical audiences.
• Strong interpersonal, written, and verbal communication skills, including the ability to facilitate cross-functional collaboration and build consensus.
• A background check (including a criminal records check) must be completed satisfactorily and is required for employment. CSU will make a conditional offer of employment, which may be rescinded if the background check reveals disqualifying information, and/or it is discovered that the candidate knowingly withheld or falsified information. Failure to complete the background check satisfactorily may affect the continued employment of a current CSU employee who was conditionally offered the position.

• Master's degree in information assurance, cybersecurity, public administration, business administration, law, or a related field.
• Professional certification(s) in one or more of the following:
  Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Cybersecurity and Infrastructure Security Agency (CISA), Certified in Risk and Information Systems Control (CRISC), Certified in the Governance of Enterprise IT (CGEIT), Certified Information Privacy Professional (CIPP), Certified Information Privacy Manager (CIPM), Certified Data Privacy Solutions Engineer (CDPSE), or equivalent.
• Experience working in higher education, particularly within the California State University (CSU) system or another large public university environment.
• Direct experience serving as a CISO, Chief Privacy Officer, or equivalent senior executive in cybersecurity, compliance, or risk.
• Experience with audit response and engagement with internal, external, and systemwide auditors.

Special

Working Conditions:

Notice of Non-Discrimination on the Basis of Gender or Sex and Contact Information for Title IX Coordinator

California State University, Fullerton is committed to fostering an environment where students, staff, administrators, and faculty thrive. We welcome individuals ready to make an impact on student and staff success to apply and become part of the Titan Community. Reasonable accommodations will be provided for qualified applicants with disabilities who self-disclose.

Cal State Fullerton is an equal opportunity employer that prohibits discrimination based either on race, sex, color, ethnicity, national origin, or any other protected status.

As of January 1, 2022, the CSU Out-of-State Employment Policy prohibits the hiring of employees to perform CSU-related work outside the state of California.

The scope of responsibilities for this position…