External Security Services Information Security Officer

Buffalo State College; Buffalo (NY); On-site; USD 77,000 - 144,000; Full time

Job summary

Buffalo State University is seeking an External Security Services Information Security Officer (ESISO) to deliver strategic cybersecurity leadership for higher education institutions in Buffalo, NY. The role focuses on assessing and implementing security strategies, policies, and frameworks while managing cyber risk and regulatory compliance.

The ESISO collaborates with campus leadership, guides risk prioritization, and oversees security projects, ensuring alignment with SN SUNY/FERPA guidelines

Qualifications

• A bachelor’s degree in a security, computing, programming, networking or related field, and progressive relevant professional work experience.
• Good presentation skills, interpersonal skills, written and communication skills.
• Demonstrated familiarity with compliance requirements (e.g., PCI , GLBA , FERPA ) and NIST Cybersecurity Framework ( CSF ) or equivalents.
• Demonstrated familiarity with creating and implementing security policies, risk assessments and tabletop exercises.
• Demonstrated familiarity with Incident Response (IR) and creating IR Plans.

Responsibilities

• Provide strategic cybersecurity leadership and advisory services to higher education institutions.
• Assess and implement security strategies, policies, and frameworks aligned with university needs.
• Help manage cyber risk, regulatory compliance, and protection of data.
• Coordinate deliverables with Security Services Service Delivery Manager and support campuses during security incidents.

Skills

Presentation skills

Interpersonal skills

Written communication

NIST CSF familiarity

Security policy development

Incident response planning

Education

Bachelor's degree in security or related field

Master’s degree or security certifications (CISM, CISSP, etc.)

Tools

Zeek

Snort

Suricata

Nmap

Metasploit

Wireshark

OpenVAS

Autopsy

Job description

Job Opportunities at Buffalo State University

Buffalo State is one of the largest comprehensive schools in the State University of New York system. As a civically minded, urban‑engaged campus community located in the city’s cultural corridor, Buffalo State prides itself as having smaller learning environments coupled with larger university opportunities. Boasting a diverse and inclusive campus, Buffalo State is committed to the intellectual, personal, and professional growth of its students, faculty, staff, and alumni. The school’s mission is to deliver a broad array of high‑quality and distinctive academic programs infused with diversity, creativity, and hands‑on learning opportunities for hardworking students who seek a personalized and affordable education that engages their minds and advances their careers. Buffalo State is dedicated to excellence in teaching, research, service, scholarship, creative activity, and cultural enrichment. With degree programs in education, the arts, science, arts and humanities, and professional studies, each year over 6,000 students choose Buffalo State. Buffalo State welcomes applicants who are committed to helping us fulfill our mission.

Faculty/Professional

Faculty/Professional Professional

Department

Local Title

Local Title External Security Services Information Security Officer

Budget Title

Budget Title Supervising Programmer/Analyst

Rank

Line Number

Line Number 21116, 21176, 21180, 21203, 21216

Salary Range

Salary Range $77,346 -$143,611 Competitive based on experience.

FTE

FTE Full-Time

Bargaining Unit

Bargaining Unit UUP

PRODiG+ Position

Executive Position

FLSA

FLSA Exempt

Department Website

Brief Job Description

ITEC’s External Security Services Information Security Officer ( ESISO ) provides strategic cybersecurity leadership and advisory services to higher education institutions. The role focuses on assessing and implementing security strategies, policies, and frameworks aligned with the unique needs of universities and colleges, while helping manage cyber risk, regulatory compliance, and protection of academic, research, and administrative data. The ESISO serves as a trusted security advisor and advocate to campus and ITEC senior management, clearly communicating risks, priorities, and recommendations in business‑relevant terms. The position requires a strong understanding of information security programs within complex U.S. organizations, including higher education, SUNY , and New York State government environments. With team leadership and security program management as core responsibilities, the role also carries a strong project management focus, coordinating deliverables with the Security Services Service Delivery Manager. The ESISO helps define, oversee, and contribute to approved campus security projects. The role also supports campuses during security incidents and advises on security‑focused software, system requirements, compliance (e.g., GLBA , PCI , FERPA ) and appropriate hardware and software configurations.

Please see https://www.itec.suny.edu/itec-vacancies for more information.

The location for this position is in Buffalo, NY. An office location at a New York State or SUNY Institution may be possible.

Multiple selections may be made from this posting.

Required Qualifications

• A bachelor’s degree in a security, computing, programming, networking or related field, and progressive relevant professional work experience..
• Good presentation skills, interpersonal skills, written and communication skills.
• Demonstrated familiarity with compliance requirements (e.g., PCI , GLBA , FERPA ) and NIST Cybersecurity Framework ( CSF ) or equivalents.
• Demonstrated familiarity with creating and implementing security policies, risk assessments and tabletop exercises.
• Demonstrated familiarity with Incident Response (IR) and creating IR Plans.

Preferred Qualifications

• Master’s degree in information security or assurance, such as MSIA , or Certifications related to Security Operations/Architecture/Engineering: ISC2: CISM , CISSP or SSCP .( CISSP - ISSAP or ISSEPa plus); relevant SANS GIAC series; or others, like PNPT , OSCP , CEH , CISA , or CySA+.
• Familiarity with Security Tools such as Zeek, Snort, Suricata, Nmap, Metasploit, Wireshark, OpenVAS, Autopsy, etc.
• Working or managerial experience in a large organization, especially higher education.
• Recent operational or administrative experience with EDR , SIEM , IDS / IPS Systems or Zero Trust Networks.
• Experience responding to or advising the response to a security breach, such as notification, chain of custody, guiding forensics, or compliance reporting.
• Experience in System Administration for Windows servers, vCenter/ESXi, Linux, Hypervisors, Networking Infrastructure a plus.
• Cloud provider experience and/or certifications with any of Azure, AWS , Google Cloud.
• Membership in REN - ISAC , MS- ISAC , or other industry ISAC .

Buffalo State is an affirmative action/equal opportunity institution that subscribes to all federal, state, and SUNY legal requirements and does not discriminate against applicants, students, or employees on the basis of race, sex, ethnicity, national origin, sexual orientation, religion, age, disability, or marital or veteran status (Nondiscrimination Notice). Any violation of this policy should be reported to the Equity and Diversity Office, Cleveland Hall 204, [phone]. Buffalo State is a VEVRAA Federal Contractor. If you have any questions, please contact Jamie Warnes at [e-mail] or call [phone].

Applicants interested in positions may access the Annual Security Report ( ASR ) for SUNY Buffalo State at http://police.buffalostate.edu . The ASR contains information on campus security policies and certain campus crime statistics. Crime statistics are reported in accordance with the Jeanne Clery Disclosure of Campus Security Policy and Campus Crime Statistics Act. Applicants may request a hard copy of the ASR by contacting the SUNY Buffalo State University Police Department at [phone].

New York State Executive Order 161

Pursuant to Executive Order 161 , no State entity, as defined by the Executive Order, is permitted to ask, or mandate, in any form, that an applicant for employment provide his or her current compensation, or any prior compensation history, until such time as the applicant is extended a conditional offer of employment with compensation. If such information has been requested from you before such time, please contact the Office of Employee Relations at [phone] or via email at [e-mail] . Further restrictions on using salary information in the hiring process appear in Labor Law §194-a .

Supplemental Questions

Required fields are indicated with an asterisk (*).

• * How did you hear about this employment opportunity?
  • Buffalo State website
  • Buffalo News
  • Buffalo Rocket
  • Challenger
  • Chronicle of Higher Education
  • HigherEdJobs
  • Panorama Hispano News
  • Employee Referral
  • Other
• * All applicants are subject to a pre‑employment background investigation. The college's Pre‑Employment Background Screening Policy is available at http://hr.buffalostate.edu/pre‑employment-background‑screening. Prior to an offer of employment, an applicant will be required to sign an authorization release form, allowing Buffalo State to conduct a background investigation. Failure of an applicant to sign the authorization release form will disqualify an applicant from further consideration for appointment.
  • I agree to comply with the college's policy.
  • I do not agree to comply with the college's policy. (Note, this selection will disqualify you from further consideration for appointment.)
• * Do you have a bachelor’s degree in a security, computing, programming, networking or related field, and progressive relevant professional work experience?
  • Yes
  • No
• * Do you have demonstrated familiarity with compliance requirements (e.g., PCI, GLBA, FERPA) and NIST Cybersecurity Framework (CSF) or equivalents?
  • Yes
  • No

Documents Needed to Apply

Required Documents

• Resume / Curriculum Vitae
• Cover Letter
• Names and Contact Information for 3 Professional References

Optional Documents