Information Security Officer
Job description
Education, training and retraining for the workforce including basic skills and literacy education, occupational and pre-baccalaureate programs.- Support for economic development through services to and in partnership with business and industry and in collaboration with the University of North Carolina System and private colleges and universities.
- Services to communities and individuals which improve the quality of life.
These ISO positions have an emphasis on cloud and infrastructure security along with the cybersecurity duties and responsibilities below.
Key areas of responsibility include, but are not limited to:
- Provide strategic and tactical cybersecurity leadership and counsel to the college CIO/IT leadership and key members of the college executive leadership team, working closely with senior administration, academic leaders, and the campus community in defining objectives for a continuous improvement model for information technology security, while building relationships and goodwill.
- Provide technical leadership as the subject matter thought leader who has experience working on various cloud solutions utilized by the colleges including, but not limited to Microsoft Azure, Office 365, AWS and Google G-Suite platforms.
- Lead information security planning processes to establish an inclusive and comprehensive information security program for the entire institution in support of academic and administrative information systems and technology. Establish annual and long-range security and compliance goals, define security strategies, metrics, reporting mechanisms and program services; and create maturity models and a roadmap for continual program improvements based on system-wide policies and standards.
- Support education and awareness programs and advise on security issues, best practices, and vulnerabilities.
- Stay abreast of information security issues and regulatory changes affecting higher education at the system, state, and national level.
- Work with college leadership and relevant responsible compliance department leadership to build cohesive security and compliance programs for the college to effectively address state and federal statutory and regulatory requirements. Develop and support a strategy for cohesively dealing with audits, compliance checks and external assessment processes for internal / external auditors, FERPA, PCI, HIPAA, FSA, GLBA, NIST 800-53/800-171 and other applicable standards.
- Support response to security incidents and act as the liaison to system and state resources, as needed, during significant information security incidents. Participate in Security Incident Response Teams (SIRT) as needed, or requested, in addressing and investigating security incidents.
- Engage in professional development to maintain continual growth in professional skills and knowledge essential to the position.
To qualify for this position, applicants must document on the application that they possess ALL of the following:
- Demonstrated knowledge of cloud environments such as AWS, Azure or Google G-Suite.
- Demonstrated ability in problem solving, process improvement, and Project Management skills.
- Working knowledge of deploying, operating, and maintaining Enterprise and/or Local Information Security programs and controls.
- In-depth knowledge in the following information security areas: Security Governance and Management, Security Frameworks, Policies, and procedures, and Federal, State Privacy Laws and regulatory guidelines including FERPA, HIPPA, PCI-DSS, NIST 800-53/800-171 and the CIS Controls.
- Experience in risk management including vulnerability assessment, control assessment, likelihood determination and risk prioritization and demonstrated ability to conduct risk assessments, audits, and reviews.
- Demonstrated knowledge of network architecture and concepts, application architecture, and interoperability of these architectures with one another Network Protocols, Routers, and Switches skills.
- Understanding of computer and network forensics, system and network security, incident management, intrusion detection, vulnerability and patch management, log analysis, and related technologies.
- Demonstrated ability to work well on collaborative, cross-functional teams. Solid interpersonal skills with ability to work effectively with people of all levels of information technology expertise with a wide range of constituencies and organizational relationships.
- Excellent communication skills; interpersonal, organizational, and analytical skills, written and verbal communications and experience with management presentations.
PREFERENCES:
To receive credit for your work experience and credentials, you must document on your application that you possess all the following:
- Knowledge of and experience with Federal cybersecurity regulations, standards, and frameworks (e.g.: NIST, CIS Controls, or ISO)
- Knowledge of and experience applying security control requirements for information security standards (e.g.: FERPA, HIPAA, PCI DSS, FSA, GLBA, or other federal compliance requirements)
- Demonstrated project management experience with cyber security program management, cyber exercise planning, incident response and monitoring, and security vulnerability/patch management
- Demonstrated supervisory experience leading a technical team in developing and transitioning cybersecurity capabilities
- Active security certification(s) (e.g.: CISSP, CCSP, CISM, GCSA, CEH, GCIA, GCIH, SANS)
Bachelor's degree in computer science or a related IT field or related degree from an appropriately accredited institution and three years of progressive experience in IT security or closely related area including two years of supervisory experience; or Associate degree in computer science or a related IT field or related degree from an appropriately accredited institution and four years of progressive experience in IT security or closely related area which includes two years supervisory experience; or an equivalent combination of education and experience.
colinoncars.com is the go-to platform for job seekers looking for the best job postings from around the web. With a focus on quality, the platform guarantees that all job postings are from reliable sources and are up-to-date. It also offers a variety of tools to help users find the perfect job for them, such as searching by location and filtering by industry. Furthermore, colinoncars.com provides helpful resources like resume tips and career advice to give job seekers an edge in their search. With its commitment to quality and user-friendliness, colinoncars.com is the ideal place to find your next job.