Director , Chief Information Security Officer

The Director, Chief Information Security Officer position within Technology Services is a subject-matter expert role, focusing on cybersecurity and the Gramm-Leach-Bliley Act (GLBA). This position will oversee a team supporting the operation of the colleges and related partners' technology components and infrastructure. This is a senior-level technical position, responsible primarily for the design, coordination, deployment, support, and maintenance of the college's systems and related technology components.

This individual is responsible for 24/7 operations essential to the college's technology infrastructure and systems. The position reports to the Chief Information Officer.

Examples of

Duties & Responsibilities:

Chief Information Security Officer Duties:

• Design and manage college-wide secure identity and access systems such as single sign-on (SSO) and multi-factor authentication (MFA) systems. Adhere to and enforce the principle of least privilege access.
• Maintain compliance with the Gramm-Leach-Bliley Act (GLBA).
• Lead cloud security administration functions in Microsoft Azure/Microsoft 365/Amazon AWS.
• Perform confidential discovery of sensitive personnel data at the direction of college administration.
• Ensure the integrity and protection of college Information Technology assets; audit information systems to identify and protect areas of vulnerability.
• Investigate, propose, and implement new and improved security products, processes, and procedures. Communicate to management IT security threats and opportunities relevant to the college.
• Lead cybersecurity incident response problem identification, investigation, containment, and remediation functions.
• Provide direction and guidance to any additional personnel focused on security.
• Maintain sufficient system logging, scanning, and security monitoring to ensure appropriate response to anomalies and alerts.
• Manage and test backup systems and processes to ensure appropriate protection of college data in the event of an outage or incident.
• Participate in Risk Assessments, Vulnerability Assessments, Penetration Tests, Audits, security questionnaires, vendor security assessments, etc. Prioritize findings and identify and implement treatments that mitigate unacceptable risks.
• Participate in Disaster Recovery plan development, testing, and response.
• Manage department personnel, evaluate individual and team performance, formulate department and individual goals, hold staff meetings, and write progress reports for each area managed.

Systems Duties:

• Lead the design, coordination, installation, configuration, operation, and maintenance of enterprise servers and services including all Windows Server Operating Systems and Unix variants (Linux, Solaris, AIX, etc.), as well as various embedded operating systems and all associated system software (e.g., backups, auditing, file/print sharing, applications, etc.)
• Lead the design, development, implementation, and documentation of software and hardware solutions. Automate and improve systems functionality, security, and cohesiveness by programming and modifying appropriate components.
• Develop project plans and establish timelines for major systems projects and initiatives.
• Act as project team leader on systems projects and product/service integrations.
• Communicate systems design changes and enhancements to support teams. Ensure change management and configuration controls & procedures are in place and adhered to.
• Provide advice, mentoring, and training for mid-level specialists on complex systems.
• Collaborate with other senior-level technical staff to engineer complex solutions to further the college's mission.
• Research and analyze user requirements, engage with vendors to prepare…