College Information Security Officer

Military, Veterans and Diverse Job Seekers; Camp Springs (MD); On-site; USD 110,000 - 150,000; Full time

Job summary

Northern Virginia Community College (NVCC) seeks a College Information Security Officer to plan and administer the college's information security program. You will implement policies, standards, and procedures to protect ITS infrastructure and manage access to systems, while overseeing security operations.

Key duties include developing the information security program, leading risk assessments, and ensuring compliance with applicable laws and regulations.

Qualifications

• CISSP certification or equivalent required.
• Strong knowledge of risk management, policy development and incident response.
• Excellent written and oral communication skills.
• Experience leading information security programs and teams.

Responsibilities

• Plan and administer the college's information security program.
• Implement policies, standards, and procedures to protect ITS infrastructure.
• Manage access to college and VCCS systems and oversee security operations.
• Develop and maintain information security program, risk assessments, and SLAs.

Skills

CISSP knowledge/certification

Information security leadership

Communication skills

Policy and procedure development

Risk management

Incident response

Microsoft products experience

Intrusion detection systems

Network protocols knowledge

Team leadership / coaching

Job description

About the job College Information Security Officer

Job Description

General Description:

The College Information Security Officer (ISO) is responsible for the planning and administration of the colleges information security program. Specifically, this position has responsibility for implementing the policies, standards, and procedures necessary to protect the college and VCCS ITS infrastructure from external or internal threats; manage access to college and VCCS systems, and administer the college IT security operations.

Duties and Tasks:

• Developing and maintaining information security program.
• Develop and implement an on-going risk assessment.
• Provide vision and leadership for developing and supporting privacy practices.
• Maintain and develop policies, procedures and SLAs associated with IT security program(s).
• Ensure compliance with federal, state, local, NVCC, and VCCS laws, rules, and regulations.
• Other duties as assigned.

Special Assignments

May be required to perform other duties as assigned. May be required to assist the agency or state government generally in the event of an emergency declaration by the Governor.

KSA's/Required Qualifications

Required KSAs:

• Knowledge or certification equal/equivalent to Certified Information Systems Security Professional (CISSP)
• Knowledge of components of robust security program
• Exceptional communication skills both orally and in writing
• Ability to articulate issues and persuade others to a recommended solution
• Excellent organizational skills
• Knowledge of security-related programs, including but not limited to, risk management, vulnerability management, policy and procedure development, audit/reporting, and incident response
• Ability to multi-task and work in a fast-paced environment
• Ability to lead the work of others
• Ability to develop, coach and counsel subordinate employees
• Ability to identify and resolve complex technical issues
• Some knowledge of network protocols, routing and systems operations

Minimum Qualifications:

• Extensive experience in relevant IT and industry roles.
• Extensive experience in Senior IT leadership roles, with responsibility for supervising subordinate technical staff.
• Extensive experience in information security management, security compliance or risk management.
• Extensive experience with Microsoft products.
• Extensive experience with intrusion detection and intrusion prevention systems.

Additional Considerations

Preferred Qualifications

• Professional certification(s) in IT Security (CISSP)
• Significant knowledge equivalent to ISACA COBIT certification