Information Security Manager 00680
CNU's Center For American Studies
A complete application in a minute
Tailored resume and cover letter, ready to send.
Job summary
Christopher Newport University is seeking an Information Security Manager to lead and implement a comprehensive information security program protecting university information assets. The role requires building a security roadmap, policies, and collaboration with multiple stakeholders across the campus.
The position emphasizes governance, risk, and compliance, with responsibilities including managing SIEM, EDR/XDR, and vulnerability management, while overseeing incident response and security
Qualifications
- Advanced knowledge of security best practices, GRC and compliance.
- Ability to align security strategy with business objectives and drive roadmap.
- Experience leading security engineers, analysts, and incident responders.
Responsibilities
- Manage and implement an information security program protecting university assets.
- Lead vulnerability management, incident response, and risk remediation at enterprise level.
- Develop security policies, procedures, and audit-ready documentation.
Skills
Education
Tools
Job description
Position Information
Working Title Information Security Manager 00680 Role Title Information Technology Specialist III Position Number 00680 FLSA Exempt Appointment Type Full Time Type of Posting General Public Is Sensitive Position? No If Sensitive Position, please paste statement Designated Personnel Yes Responsible Employee
This position is designated as a “responsible employee” who has the authority to redress sexual violence, who has the duty to report incidents of sexual violence or other student misconduct, or who a student could reasonably believe has this authority or duty.
If Designated Personnel, please paste statement
This position is a “designated position” meaning this position could potentially be required to work (depending on the event) during an emergency closing.
Statement of Economic Interest No If Statement of Economic Interest, please paste statement
Is this a restricted position subject to availability of funding? No If Restricted Position, please paste statement
To inspire and foster partnerships that focus on innovative solutions for ubiquitous access and use of information services to support educational and cultural opportunities that benefit the CNU community.
The Information Security Manager is responsible for managing and implementing an efficient and effective information systems security program that provides for the protection of the university’s information assets.
- Advanced knowledge of security best practices, Governance, Risk, and Compliance (GRC)
- Ability to align security strategies with business objectives to include defining and driving the security roadmap, policy framework, and architecture
- Ability to hire, train, and guide security engineers, analysts, and incident response personnel
- Detailed knowledge of Access Controls, the concept of Least Privilege, Security Policy, Security Procedures, and Separation of Duties
- Ability to implement and audit security controls
- Ability to manage vulnerability scanning tools and common vulnerability frameworks
- Knowledge of endpoint security tools (EDR/XDR), including antivirus and malware mitigation tools
- Ability to oversee and manage SIEM platforms
- Ability to think critically, analyze risk, consider possible solutions, and make recommendations
- Demonstrated ability to communicate effectively both verbally and in writing with diverse groups of organizations and people
- Ability to develop relationships with and provide guidance to all levels of management regarding employee system access
- Ability to maintain the highest professional standards
- Ability to be accurate, thorough, and productive with all work
- Demonstrated understanding of networking ports and protocols, traffic flow, system administration, defense-in-depth, and common security elements
- Ability to manage security incident responses, post-incident investigations, and communicate updates to University stakeholders
- Demonstrated understanding of federal and state security standards, including FERPA, NIST 800 Series, PCI Compliance Regulations, and the Commonwealth of Virginia
- Knowledge of firewalls and IDS/IPS technologies as it relates to secure environments
- Demonstrated adaptability and the ability to grow within the information security field
- Demonstrated understanding of technical, engineering, and programmatic capabilities related to information systems and/or subsystems
- Ability to develop and create parsers for ingesting logs into SIEM platforms
- High school graduate or equivalent education/experience that equates to a high school diploma
- Significant experience within the information security field
- Moderate experience in a leadership or managerial role
- Experience managing security systems to include architecture, design, installation, operational planning, and/or risk remediation activities on an enterprise level
- Experience performing information security tasks such as performing IT/technical audits, security vulnerability assessments, system configuration verifications, and/or security-related assignments
- Possession of a current and maintained Information Security certification such as a CISSP, CISM, or similar.
- BA or BS in Information Security, Information Assurance, Computer Science, or related equivalent professional experience
- A master’s degree in Computer Science, Cybersecurity, or related technical field
- Significant experience working with centralized logging solutions (e.g., parsing logs, developing dashboards and reports)
- Experience with vulnerability scanning
- Experience with compliance verification tools
- Experience with system authorizations and supporting security documentation development such as System Security Plans (SSP), security architecture, system access requests, Risk Assessments, and Plans of Actions and Milestones (POA&M)
- Experience in incident responses to include investigating, remediating, and/or documenting security issues
- Experience conducting university-wide security training programs
- Experience working in a higher education environment
- Experience developing Standard Operating Procedures and/or playbooks
Salary $78,063 to $97,579, Commensurate with Education and Experience CNU Information
This position includes Commonwealth of Virginia and Christopher Newport University employee benefits. CNU offers a comprehensive benefits package to include retirement plans, medical, dental, vision, and a variety of other options. Available leave includes vacation, sick time, personal time, and volunteer/service leave. State employees are eligible for discounted travel, banking, legal and retail services, among others. To view more information about our benefits, please visit https://cnu.edu/hr/benefits/.
- This is a classified position. New and returning classified employees are required to complete a 12-month probationary period.
- Selected candidate must attend a 2-day New Employee Orientation Program.
- This position is designated as an on-campus position and requires regular in-person work at the university’s campus.
- Selected candidate must be able to perform their duties on campus during assigned work hours.
- This position is not eligible for full-time remote work, and requests to negotiate a fully remote arrangement will not be considered.
- Any telework opportunities are limited, subject to university policy and departmental approval, and may be modified or discontinued at any time.
This position is eligible for periodic telework as determined by the department. Eligibility is not guaranteed, and is subject to supervisor approval. Eligibility will depend on the likelihood of the employee’s success in a telework arrangement and the supervisor’s ability to manage telework. Departments and/or Human Resources may modify or revoke eligibility at any time. Employees will be required to sign a Telework Agreement.
Light Lifting (less than 20 lbs.) Essential Moderate Lifting (20-50 lbs.) Marginal Heavy Lifting (more than 50 lbs.) Marginal Pushing/Pulling Marginal Standing Essential Sitting Essential Bending Essential Walking Essential Climbing Non-Applicable Reaching Essential Repetitive Motion Essential List other physical requirements
Fast Pace Essential Average Pace Marginal Multiple Priorities Essential Intense Customer Interaction Essential Multiple Stimuli Essential Frequency Changes Essential
Memory Essential Reasoning Essential Hearing Marginal Reading Essential Analyzing Essential Logic Essential Verbal Communication Essential Written Communication Essential List other mental/sensory requirements
Posting Number PS1263P Number of Vacancies 1 Posting Date 10/08/2026 Closing Date 10/26/2026 Open Until Filled No Special Instructions to Applicants
Christopher Newport University, an EO Employer, is fully Committed to Access and Opportunity.
Christopher Newport University (CNU) will make a reasonable effort to accommodate persons with disabilities in the application and/or interview process. Persons with disabilities who require accommodation should contact the CNU Human Resources Office by calling (757) 594-7145.
In support of the Commonwealth’s commitment to inclusion, we are encouraging individuals with disabilities to apply through the Commonwealth’s Alternative Hiring Process. To be considered for this opportunity, applicants will need to upload an approved AHP Letter received from the Department for Aging & Rehabilitative Services (DARS) or from the Department for the Blind & Vision Impaired (DBVI) to their applications.
Note: Certificates of Disability provided by DARS or DBVI dated April 1, 2022, through February 29, 2024, will still be accepted as applicable for the AHP. The name change to AHP Letter became effective March 1, 2024.
Service-Connected Veterans are encouraged to answer Veteran status questions and submit their disability documentation, if applicable, to DARS to get their AHP Letter.
Requesting an AHP Letter can be found at AHP Letter or by calling DARS at 800-552-5019.
Applicant finalists are required to complete a CNU sponsored background check. After accepting employment, individuals are required to complete a USCIS Form I-9 (employment eligibility verification) and present documentation from the USCIS List of Acceptable Documents that establishes both their identity and employment authorization to work in the United States. The provided documents will be verified through the Department of Homeland Security E-Verify website.
- Do you have a valid Interagency Placement Screening Form (Yellow Card)? This form is provided to Commonwealth of Virginia employees when they are notified that they will be affected by a layoff per Policy 1.30. This form must be attached in order to receive credit.
- Yes
- No
- Do you have a Preferential Hiring Form (Blue Card)? This form is provided to Commonwealth of Virginia employees when they are notified that they will be affected by a layoff per Policy 1.30. This form must be attached in order to receive credit.
- Yes
- No
- * Have you retired from a VRS covered position?
- Yes
- No
- Would you like to be considered for the Alternative Hiring Process (AHP)?:
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
