Director, Information Security
Core
Develop, implement, and monitor a strategic enterprise cyber security and IT risk management program to ensure business alignment, governance, and system availability.
Role type
Director, Information Security (Strategy & Leadership)
Builds
Enterprise-wide information security program, security tooling, automation, and incident response capabilities
Domain
Higher Education / Information Security
Required skills
Information Security Program (ISP) development, Identity and Access Management, Incident Response, Cloud Security (AWS/Azure), Compliance (FERPA, HIPAA, PCI-DSS, NIST, ISO), Vendor Management, Security Automation, Secure SDLC/DevSecOps
Preferred skills
Higher Education experience, CISSP/CISM/CCSP certifications
Technologies
AWS, Azure, SEIM, Data Loss Prevention, Security Event Management, OWASP, FedRAMP, AICPA SOC, NIST 800-53, 800-171, ISO 27001, CMMC, ISO 27018, GDPR
Responsibilities
Conduct security needs assessments and design security roadmaps; Lead security assessment and testing (penetration testing, vulnerability management); Plan and manage incident response; Develop security tooling and automation; Lead compliance activities and external audits; Educate the organization on threats; Serve as security expert for the Executive team; Manage external security vendors; Attract and develop a security team
Seniority
Director, Management & Leadership
