CISO: Strategic Information Security Leader

California State University Channel Islands; Oxnard (CA); On-site; USD 8,300 - 13,000; Full time

Job summary

California State University Channel Islands seeks an experienced information security leader to serve as ISO/CRO/CPO, overseeing the university's information security program and compliance with CSU, state, and federal requirements. The role leads policy development, risk assessment, incident response, and education across campus.

Ideal candidates will have 8–10 years in IT security and risk management, with at least 4 years in a leadership role, and hold CISSP/CISM/CISA certifications.

Qualifications

• Bachelor's degree is required; advanced degree is preferred.
• 8-10 years of IT security, IT risk management, and general IT; at least 4 years in leadership.
• Certifications such as CISSP, CISM, or CISA are preferred.
• Experience in IT higher education is preferred.

Responsibilities

• Coordinate development of information security policies, standards, and procedures.
• Deliver education and training on information security and privacy for employees, students, and users.
• Serve as university compliance officer for CSU Channel Islands information security policies and regulations.
• Develop and implement ongoing information security risk assessments and mitigations.
• Oversee incident prevention and response, including reporting and coordination with stakeholders.
• Collaborate with ITS and external auditors; communicate security risks to leadership.

Skills

Leadership

IT Security

Policy development

Regulatory compliance

Communication

Education

Bachelor's degree

Advanced degree preferred

CISSP

CISM

CISA

Tools

Firewalls

IDS/IPS

Vulnerability scanning

Job description

California State University Channel Islands seeks an experienced information security leader to serve as ISO/CRO/CPO, overseeing the university's information security program and compliance with CSU, state, and federal requirements. The role leads policy development, risk assessment, incident response, and education across campus.

Ideal candidates will have 8–10 years in IT security and risk management, with at least 4 years in a leadership role, and hold CISSP/CISM/CISA certifications.