Information Security Manager 00680

CNU's Center For American Studies; Newport News (VA); Sur place; USD 78 000 - 98 000; Plein temps

Résumé du poste

Christopher Newport University seeks an Information Security Manager to lead the university's information security program, protecting critical information assets and aligning security strategy with campus objectives.

The role requires managing incident responses, vulnerability management, and security documentation across enterprise systems. A strong background in GRC, policy development, and cross-functional leadership is essential.

Qualifications

• Advanced knowledge of security best practices, GRC, and risk management.
• Ability to align security strategies with business objectives and drive policy/framework.
• Experience hiring, training, and guiding security engineers and incident responders.
• Deep knowledge of access controls, least privilege, security policy and separation of duties.
• Experience auditing security controls and managing vulnerability tools.
• Knowledge of endpoint security tools (EDR/XDR) and malware mitigation.
• Ability to lead SIEM platforms and security operations.
• Strong communication with diverse stakeholders and management levels.

Responsabilités

• Manage and implement a security program protecting university information assets.
• Oversee security architecture, design, installation, and risk remediation at enterprise level.
• Lead incident response, post-incident investigations, and communications with stakeholders.
• Develop and maintain security policies, SOPs and documentation (SSP, architecture, access requests).
• Coordinate vulnerability scanning, logging, dashboards, reports, and compliance efforts.

Connaissances

GRC knowledge

Security roadmap

Incident response

SIEM management

Endpoint security

Vulnerability scanning

Security policy

Risk analysis

Formation

High school diploma

BA/BS in Information Security or related field

Master’s degree in CS/Cybersecurity or related field

Description du poste

Posting Details

Position Information

Working Title Information

Information Security Manager 00680

Role Title Information Technology Specialist III

Position Number 00680

FLSA Exempt

Appointment Type Full Time

Type of Posting General Public

Is Sensitive Position? No

If Sensitive Position, please paste statement

Designated Personnel Yes

Responsible Employee

This position is designated as a “responsible employee” who has the authority to redress sexual violence, who has the duty to report incidents of sexual violence or other student misconduct, or who a student could reasonably believe has this authority or duty.

If Designated Personnel, please paste statement

This position is a “designated position” meaning this position could potentially be required to work (depending on the event) during an emergency closing.

Statement of Economic Interest No

Is this a restricted position subject to availability of funding? No

Departmental Objective

To inspire and foster partnerships that focus on innovative solutions for ubiquitous access and use of information services to support educational and cultural opportunities that benefit the CNU community.

Purpose of the Position

The Information Security Manager is responsible for managing and implementing an efficient and effective information systems security program that provides for the protection of the university’s information assets.

Knowledge, Skills, And Abilities Related To Position

• Advanced knowledge of security best practices, Governance, Risk, and Compliance (GRC)
• Ability to align security strategies with business objectives to include defining and driving the security roadmap, policy framework, and architecture
• Ability to hire, train, and guide security engineers, analysts, and incident response personnel
• Detailed knowledge of Access Controls, the concept of Least Privilege, Security Policy, Security Procedures, and Separation of Duties
• Ability to implement and audit security controls
• Ability to manage vulnerability scanning tools and common vulnerability frameworks
• Knowledge of endpoint security tools (EDR/XDR), including antivirus and malware mitigation tools
• Ability to oversee and manage SIEM platforms
• Ability to think critically, analyze risk, consider possible solutions, and make recommendations
• Demonstrated ability to communicate effectively both verbally and in writing with diverse groups of organizations and people
• Ability to develop relationships with and provide guidance to all levels of management regarding employee system access
• Ability to maintain the highest professional standards
• Ability to be accurate, thorough, and productive with all work
• Demonstrated understanding of networking ports and protocols, traffic flow, system administration, defense-in-depth, and common security elements
• Ability to manage security incident responses, post-incident investigations, and communicate updates to University stakeholders
• Demonstrated understanding of federal and state security standards, including FERPA, NIST 800 Series, PCI Compliance Regulations, and the Commonwealth of Virginia
• Knowledge of firewalls and IDS/IPS technologies as it relates to secure environments
• Demonstrated adaptability and the ability to grow within the information security field
• Demonstrated understanding of technical, engineering, and programmatic capabilities related to information systems and/or subsystems
• Ability to develop and create parsers for ingesting logs into SIEM platforms

Education

• High school graduate or equivalent education/experience that equates to a high school diploma

Experience

• Significant experience within the information security field
• Moderate experience in a leadership or managerial role
• Experience managing security systems to include architecture, design, installation, operational planning, and/or risk remediation activities on an enterprise level
• Experience performing information security tasks such as performing IT/technical audits, security vulnerability assessments, system configuration verifications, and/or security-related assignments
• Possession of a current and maintained Information Security certification such as a CISSP, CISM, or similar.

Additional Consideration(s)

Education

• BA or BS in Information Security, Information Assurance, Computer Science, or related equivalent professional experience
• A master’s degree in Computer Science, Cybersecurity, or related technical field

Experience

• Significant experience working with centralized logging solutions (e.g., parsing logs, developing dashboards and reports)
• Experience with vulnerability scanning
• Experience with compliance verification tools
• Experience with system authorizations and supporting security documentation development such as System Security Plans (SSP), security architecture, system access requests, Risk Assessments, and Plans of Actions and Milestones (POA&M)
• Experience in incident responses to include investigating, remediating, and/or documenting security issues
• Experience conducting university-wide security training programs
• Experience working in a higher education environment
• Experience developing Standard Operating Procedures and/or playbooks

Salary Information

Salary $78,063 to $97,579, Commensurate with Education and Experience CNU Information

This position includes Commonwealth of Virginia and Christopher Newport University employee benefits. CNU offers a comprehensive benefits package to include retirement plans, medical, dental, vision, and a variety of other options. Available leave includes vacation, sick time, personal time, and volunteer/service leave. State employees are eligible for discounted travel, banking, legal and retail services, among others. To view more information about our benefits, please visit https://cnu.edu/hr/benefits/.

Role Code

39113

Conditions of Employment

• This is a classified position. New and returning classified employees are required to complete a 12-month probationary period.
• Selected candidate must attend a 2-day New Employee Orientation Program.
• This position is designated as an on-campus position and requires regular in-person work at the university’s campus.

Telework Eligibility

This position is eligible for periodic telework as determined by the department. Eligibility is not guaranteed, and is subject to supervisor approval. Eligibility will depend on the likelihood of the employee’s success in a telework arrangement and the supervisor’s ability to manage telework. Departments and/or Human Resources may modify or revoke eligibility at any time. Employees will be required to sign a Telework Agreement.

Physical/Cognitive Requirements

Light Lifting (less than 20 lbs.) Essential

Moderate Lifting (20-50 lbs.) Marginal

Heavy Lifting (more than 50 lbs.) Marginal

Pushing/Pulling Marginal

Standing Essential

Sitting Essential

Bending Essential

Walking Essential

Climbing Non-Applicable

Reaching Essential

Repetitive Motion Essential

List other physical requirements

Emotional Demands

Fast Pace Essential

Average Pace Marginal

Multiple Priorities Essential

Intense Customer Interaction Essential

Multiple Stimuli Essential

Frequency Changes Essential

List other mental/sensory requirements

Mental/Sensory Demands

Memory Essential

Reasoning Essential

Hearing Marginal

Reading Essential

Analyzing Essential

Logic Essential

Verbal Communication Essential

Written Communication Essential

List other mental/sensory requirements

Posting Detail Information

Posting Number PS1263P

Number of Vacancies 1

Posting Date 10/08/2026

Closing Date 10/16/2026

Open Until Filled No

Special Instructions to Applicants

Christopher Newport University, an EO Employer, is fully Committed to Access and Opportunity.

Christopher Newport University (CNU) will make a reasonable effort to accommodate persons with disabilities in the application and/or interview process. Persons with disabilities who require accommodation should contact the CNU Human Resources Office by calling [phone].

In support of the Commonwealth’s commitment to inclusion, we are encouraging individuals with disabilities to apply through the Commonwealth’s Alternative Hiring Process.

To be considered for this opportunity, applicants will need to upload an approved AHP Letter received from the Department for Aging & Rehabilitative Services (DARS) or from the Department for the Blind & Vision Impaired (DBVI) to their applications.

Note: Certificates of Disability provided by DARS or DBVI dated April 1, 2022, through February 29, 2024, will still be accepted as applicable for the AHP. The name change to AHP Letter became effective March 1, 2024.

Service-Connected Veterans are encouraged to answer Veteran status questions and submit their disability documentation, if applicable, to DARS to get their AHP Letter.

Requesting an AHP Letter can be found at AHP Letter or by calling DARS at 800-552-5019.

Applicant finalists are required to complete a CNU sponsored background check. After accepting employment, individuals are required to complete a USCIS Form I-9 (employment eligibility verification) and present documentation from the USCIS List of Acceptable Documents that establishes both their identity and employment authorization to work in the United States. The provided documents will be verified through the Department of Homeland Security E-Verify website.