Chief Information Security Officer

Job No: 554597; 01/22/2026

CHIEF INFORMATION SECURITY OFFICER

California State University, Los Angeles, invites applications for the above Administrator III position.

The University:
California State University, Los Angeles (Cal State LA) is one of 22 campuses within the California State University system. The University is the premier comprehensive public university in the heart of Los Angeles. We offer nationally recognized programs and our faculty have a strong commitment to scholarship, research, creative pursuits, and service.

As a federally recognized Hispanic-serving (HSI) and Asian-American, Native American, and Pacific Islander-serving institution (AANAPISI), Cal State LA recognizes the transformative power of education and embraces its duty to identify and serve the needs of all of its students. The University is committed to creating a community in which a diverse population of students, faculty, and staff can thrive.

The Position:

The Chief Information Security Officer (CISO) is responsible for overseeing, managing, and safeguarding Cal State LA's information security posture and meeting the security control requirements of the applicable Federal, State, and local compliance mandates. This includes establishing information security visions, strategies, architecture, governance, and capability roadmaps, developing, and implementing comprehensive information security policies, procedures, and programs, conducting regular security assessments, audits, and penetration testing, and responding to security incidents.

Reporting directly to the Vice President, this pivotal role entails exercising enterprise-wide authority to ensure compliance with university information security policies and IT risk management practices, consistent with industry standards and governmental regulations. The CISO also serves as a strategic advisor to the university's executive leadership on information security matters.

This comprehensive role involves a strategic and multifaceted approach to information security, data governance, risk management, and regulatory compliance, contributing significantly to the university's overall cybersecurity posture and resilience. As an advocate for Cal State LA's overall information security needs and awareness planning, the ClSO provides vision and leadership for developing and supporting security and compliance initiatives.

The incumbent, serving as the CISO, directs the planning and implementation of security controls for enterprise IT systems, business operations, and facility defenses against security breaches and vulnerability issues. Additionally, the CISO is responsible for auditing existing systems and overseeing the administration of security policies, activities, and standards to meet the applicable IT and regulatory compliance mandates.

The incumbent works closely with the legal, audit, and Human Resources Management (HRM) to assist with non-retention, investigation, e-discovery, and litigation requirements. Incumbent serves as the campus security and compliance liaison on various committees including the CSU Information Security Advisory Committee (ISAC) and CSU system-wide information security initiatives.

Key Responsibilities of the CISO:

In collaboration with the university's executive leadership, the CISO plays a pivotal role in defining acceptable levels of information security risk, aligning cybersecurity strategies with institutional objectives, and ensuring the university's overall resilience against cyber threats and regulatory compliance requirements. Key responsibilities encompass:

• Identify risks and IT security and compliance requirements and priorities:
Collaborate with executive management to establish acceptable risk profiles, balance security measures with operational needs and business objectives, identify and remediate security-related compliance gaps, establish security and compliance governance processes to ensure security and compliance solutions are appropriate, and resources are allocated based on the priorities of the university business objectives.

• Protect the information assets and reputation of the university from cyberattacks:
Design,…