Director, Information Security

University of Maryland Global Campus; Adelphi (MD); Presencial; USD 140.000 - 200.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Tuition remission

Reasonable workplace accommodation

Descripción de la vacante

University of Maryland Global Campus (UMGC) seeks an experienced information security leader to develop, implement, and manage a robust Information Security Program aligned with higher education needs. The role focuses on IAM, cloud security, incident response, risk management, and compliance across FERPA, HIPAA, PCI-DSS, and related standards.

The successful candidate will drive security governance, assess technologies, oversee awareness training, and collaborate with stakeholders to embed

Formación

• Experience developing, maintaining, and implementing an Information Security Program (ISP) including policy and strategy development, preferably in higher education.
• Experience addressing information security-related issues involving identity and access management, intrusion detection, forensics, incident management, risk management and/or auditing.
• Experience evaluating and providing guidance on information security software and hardware acquisitions, IT services, cloud-based solutions, and mobility.
• Knowledge of security assessment and testing tools.
• Experience with information security awareness and training program development and management.
• Experience with information security and compliance issues (FERPA, HIPAA, PCI-DSS, GLBA, copyright and software piracy).
• Experience in managing and negotiating vendor contracts and agreements.
• Strong communication skills and ability to influence stakeholders and foster adoption of secure practices.
• Expert knowledge of cloud security, cloud offerings from major providers (AWS, Azure), and securing SaaS environments.
• Experience with enterprise security technologies (SIEM, AppSec, Cloud Security, DLP,(SEIM), Identity and Access Management).
• Familiarity with standards including OWASP, FedRAMP, SOC, NIST 800-53/800-171, ISO 27001/27018 and GDPR.
• Deep understanding of networking and network security.
• Experience with Secure SDLC and DevSecOps or security automation.
• Ability to work under pressure across multiple stakeholders.
• Excellent written and oral communication skills.
• 8+ years of relevant information security experience and 4+ years of supervisory/leadership experience in information security or network administration (higher education preferred).
• UMGC commitment to inclusive workplace and reasonable accommodation policy.

Conocimientos

Information Security Program

Identity & Access Management

Incident management

Risk management

Auditing

Cloud security

Security assessment tools

Security awareness training

Vendor contract management

Communication skills

Leadership / management

Herramientas

SIEM tools

DLP

Threat & Vulnerability Management

IAM platforms

DSLC/DevSecOps

Descripción del empleo

* Experience developing, maintaining, and implementing an Information Security Program (ISP) including policy and strategy development, preferably in higher education.* Experience addressing information security-related issues involving identity and access management, intrusion detection, forensics, incident management, risk management and/or auditing.* Experience evaluating and providing guidance on information security software and hardware acquisitions, IT services, cloud-based solutions, and mobility* Knowledge of security assessment and testing tools.* Experience with developing and managing an information security awareness and training program.* Experience with information security and compliance-related issues (e.g. FERPA, HIPAA, PCI-DSS, GLBA, copyright and software piracy).* Experience in managing and negotiating vendor contracts and agreements.* Ability to communicate effectively in writing and oral presentations.* Strong business acumen and a collaborative, influential partner able to educate, build relationships, and foster adoption of sound security practices (commitment + compliance).* Expert experience with cloud security, platforms and services, including understanding of current security offerings from leading cloud service providers (e.g. AWS, Azure, etc.), and their applicability to securing a SaaS enterprise security environment.* Experience in the evaluation and implementation of industry standard enterprise-wide information security technologies and concepts, including but not limited to: SEIM, Application Security, Cloud Security (AWS), Data Loss Prevention, Security Event Management, Threat and Vulnerability Management and Identity and Access Management.* Clear understanding of relevant information security governance, technical and security standards and regulations Familiarity with industry security standards and compliances including OWASP, FedRAMP, AICPA SOC, NIST 800-53, 800-171 ISO 27001, CMMC, and ISO 27018 as well as current data privacy regulations, including GDPR and regional standards. Deep knowledge of networking and network security.* Strong understanding and experience with Secure SDLC and DevSecOps or security automation Ability to work under pressure across multiple stakeholders.* Excellent written and communication skills and ability to communicate across all levels of an organization.* 8+ years of relevant experience in the information security space.* 4+ years of progressively responsible management and/or leadership experience in information security or network administration which includes two years of supervisory experience. Experience with an institution of higher education is preferred.The University of Maryland Global Campus Global Campus (UMGC) is committed to creating and maintaining a welcoming and inclusive working environment for people of all abilities. UMGC is dedicated to the principle that no qualified individual with a disability shall, based on disability, be excluded from participation in or be denied the benefits of the services, programs, or activities of the University, or be subjected to discrimination. For information about UMGC's Reasonable Workplace Accommodation Policy or to request an accommodation, applicants/candidates can contact Employee Accommodations via email at**Tuition Remission:** Immediate availability for Regular Exempt Staff. Spouses and dependent children are eligible for undergraduate tuition remission after two years of service. **NOTE: For part-time employees (at least 50 percent of the time), tuition remission benefits are prorated.**