Assistant Vice President, Chief Information Security Officer

Kansas State University; Manhattan (KS); On-site; USD 150,000 - 230,000; Full time

Job summary

Kansas State University seeks a seasoned Chief Information Security Officer to lead the information security program, reporting to CIO. The role drives strategic security operations, risk management, and governance across campus, aligning with researchers, faculty, and staff to strengthen cyber posture and data protection.

The role oversees a team including data security, risk and compliance, security engineers, and student workers, while coordinating with vendors and university leadership on

Qualifications

• Bachelor’s degree plus ten years of relevant experience.
• Bachelor’s or master’s degree in Computer Science, Information Systems, Cybersecurity, or a related field.
• Certifications in information security (e.g., CISSP, CISM, CEH, GIAC).
• Extensive experience in developing and managing comprehensive information security programs, including cybersecurity strategies, risk management, data protection, and compliance frameworks.
• Strong leadership and team development skills, with a proven ability to build, manage, and mentor multidisciplinary cybersecurity teams.
• Deep understanding of information security technologies, trends, best practices, regulatory requirements, and experience designing and implementing detection and response security controls.

Skills

Leadership

Team development

Cybersecurity

Education

Bachelor’s degree

Master’s degree (CS/IS/Cybersecurity)

Job description

Assistant Vice President, Chief Information Security Officer

Kansas State University

About This Role

Reporting to the Associate Vice President and CIO, the CISO will provide the necessary vision and leadership to develop and implement a strategic technological security operations unit and associated plan for strengthening K-State's IT infrastructure and systems.

The CISO will work closely with other senior leaders and oversee the implementation and expansion of technologies across campus, establish and maintain IT and security best practices, and effectively communicate risk and risk‑prevention measures to all members of the community.

In addition to leading day‑to‑day detection and response technologies to improve the University’s cyber posture, the CISO will lead system improvements related to research that reduce redundancies, provide efficiencies, promote collaboration, improve response timeliness, and enhance data integrity.

The CISO will manage a team including a Director of Data Security and Privacy, a Cyber Security Risk and Compliance Analyst, six full‑time security engineers, and 4‑5 student workers, and will promote an organizational culture of timely, effective, and user‑friendly customer service.

Other responsibilities include budget planning, financial oversight, resource management tailored to information security operations, working with third‑party security vendors, and collaborating with research faculty and departments to safeguard K‑State data and resources while ensuring compliance with changing laws and government policies.

About Us

Kansas State University’s Division of Information Technology provides excellent IT services to support teaching, learning, research, and service missions. It offers a wide range of information, technology, and communications services, and provides leadership for delivering computing and digital resources to students, faculty, and staff.

The Division coordinates and manages central IT business services covering Enterprise Systems, Portfolio & Project Governance, Infrastructure & Operations, Academic Applications, Information Security, and Academic IT, and Research Technology.

Worksite Description

This position is onsite.

What You’ll Need to Succeed

Minimum Qualifications

• Bachelor’s degree plus ten years of relevant experience.

Preferred Qualifications

• Bachelor’s or master’s degree in Computer Science, Information Systems, Cybersecurity, or a related field.
• Certifications in information security (e.g., CISSP, CISM, CEH, GIAC).
• Extensive experience in developing and managing comprehensive information security programs, including cybersecurity strategies, risk management, data protection, and compliance frameworks.
• Strong leadership and team development skills, with a proven ability to build, manage, and mentor multidisciplinary cybersecurity teams.
• Deep understanding of information security technologies, trends, best practices, regulatory requirements, and experience designing and implementing detection and response security controls.