Director Information Security Operations - 530712

The University of Alabama; Tuscaloosa (AL); Hybrid; USD 102,000 - 143,000; Full time

Job summary

The University of Alabama seeks a Director of Information Security Operations to lead technical activities and operational efforts for the university's information security program. You will oversee detection, response, investigation, and remediation, and supervise the security operations team, providing high-level oversight to the Security Operations Center.

You will advise leadership on information security matters, monitor trends, and act as incident commander for low to medium severity

Qualifications

• Bachelor's degree and 8+ years of information security experience, or Master's degree and 6+ years of information security experience.
• CISSP certification and GIAC Certified Incident Handler (GCIH) certification required.

Responsibilities

• Lead information security operations and strategic planning for the University’s security program.
• Oversee security detection, response, investigation, and remediation activities.
• Supervise the security operations team and provide high-level oversight to the Security Operations Center.

Skills

Leadership

Information security

Incident response

Communication

Education

Bachelor's degree

Master's degree

Tools

CISSP

GCIH

Job description

Pay Grade/Pay Range: Minimum: $101,900 - Midpoint: $142,700 (Salaried E15)

Department/Organization: 200721 - Enterprise Technology

Normal Work Schedule: Monday - Friday 8:00am to 5:00pm

Note to Applicants: Position is eligible for hybrid work subject to University policy.

Job Summary: The Director of Information Security Operations leads technical activities and operational efforts for the University’s information security program. Leads information security detection, response, investigation, and remediation activities. Oversees operational security programs such as data loss prevention, anti-malware, and web security. Plans and directs operational information security strategies. Directly supervises the security operations team. Provides high-level oversight to the Security Operations Center. Advises leadership on information security matters. Monitors industry trends to develop and implement best practices for information security operations. Serves as the incident commander for low and medium severity incidents.

Additional Department Summary: Provides vision and direction of the information security operations program. Manages and matures information security operations practices for the University. Oversees the information security awareness program for the University. Manages and trains personnel and provides technical leadership, direction, and expertise.

Required Minimum Qualifications: Bachelor's degree and eight (8) years of information security experience; OR master's degree and six (6) years of information security experience. Must have CISSP certification and GIAC Certified Incident Handler (GCIH) certification.

Skills and Knowledge: Deep understanding of information security frameworks. Aptitude for solving problems. Self-motivated and resourceful. Ability to manage highly complex assignments and systems. Ability to effectively communicate verbally and in writing with customers and leadership. Ability to work with customer groups and users of varying degrees of technical ability and understanding. Ability to manage, lead, and support a team of technical staff who support a wide range of processes. Ability to understand team members’ strengths and weaknesses and leverage all available resources to work through incidents. Effective time management skills. Ability to work on and manage multiple projects simultaneously.

Preferred Qualifications: Familiarity with higher education and UA-specific business processes. Extensive experience working with customers and participating in information security incident response activities.

Background Investigation Statement: Prior to hiring, the final candidate(s) must successfully pass a pre-employment background investigation and information obtained from social media and other internet sources. A prior conviction reported as a result of the background investigation DOES NOT automatically disqualify a candidate from consideration for this position. A candidate with a prior conviction or negative behavioral red flags will receive an individualized review of the prior conviction or negative behavioral red flags before a hiring decision is made.

Equal Employment Opportunity:The University of Alabama is an Equal Employment/Equal Educational Opportunity Institution. All qualified applicants will receive consideration for employment or volunteer status without regard to any legally protected basis and will not be discriminated against because of their protected status. Applicants and employees of this institution are protected under Federal law from discrimination on several bases. More information is available in the EEOC’s Know Your Rights: Workplace discrimination is illegal poster. The University of Alabama affirms its longstanding commitment to institutional neutrality, free speech, and academic freedom.