Information Security Manager 00680

Christopher Newport University; Newport News (VA); On-site; USD 78,000 - 98,000; Full time

Benefits offered by this job

Retirement plans

Medical, dental, vision

Paid leave

Job summary

Christopher Newport University seeks an Information Security Manager to lead the information security program and protect university information assets. You will guide security engineers, manage incident responses, and drive the security roadmap aligned with university objectives.

Role requires experience with security governance, vulnerability management, SIEM oversight, and compliance with FERPA and NIST standards. This is an on-campus role with full-time hours and comprehensive benefits.

Qualifications

• Advanced knowledge of security best practices, Governance, Risk, and Compliance (GRC).
• Ability to align security strategies with business objectives including policy framework and architecture.
• Ability to hire, train, and guide security engineers and incident responders.
• Knowledge of least privilege, access controls, and security procedures.

Responsibilities

• Manage and implement an effective information security program.
• Lead security engineers, analysts, and incident response personnel.
• Oversee vulnerability scanning, SIEM, and incident response activities.
• Ensure compliance with FERPA, NIST, PCI, and Virginia Commonwealth standards.

Skills

Security governance

Roadmap alignment

Leadership/mgmt

Access control concepts

Security incident handling

Vulnerability management

SIEM oversight

Network security concepts

Education

Bachelor degree (Info Security/CS)

Master's degree in CS/Cybersecurity

Tools

SIEM platforms

Vulnerability scanners

EDR/XDR tools

Security policy tooling

Job description

Working Title:

Information Security Manager 00680

Role Title:

Information Technology Specialist III

Position Number:

00680

FLSA:

Exempt

Appointment Type:

Full Time

Type of Posting:

General Public

Is Sensitive Position?:

No

Designated Personnel:

Yes

Responsible Employee:

This position is designated as a “responsible employee” who has the authority to redress sexual violence, who has the duty to report incidents of sexual violence or other student misconduct, or who a student could reasonably believe has this authority or duty.

If Designated Personnel, please paste statement:

This position is a “designated position” meaning this position could potentially be required to work (depending on the event) during an emergency closing.

Statement of Economic Interest:

No

Is this a restricted position subject to availability of funding?:

No

Departmental Objective:

To inspire and foster partnerships that focus on innovative solutions for ubiquitous access and use of information services to support educational and cultural opportunities that benefit the CNU community.

Purpose of the Position:

The Information Security Manager is responsible for managing and implementing an efficient and effective information systems security program that provides for the protection of the university’s information assets.

Knowledge, Skills, and Abilities Related to Position:

• Advanced knowledge of security best practices, Governance, Risk, and Compliance (GRC)
• Ability to align security strategies with business objectives to include defining and driving the security roadmap, policy framework, and architecture
• Ability to hire, train, and guide security engineers, analysts, and incident response personnel
• Detailed knowledge of Access Controls, the concept of Least Privilege, Security Policy, Security Procedures, and Separation of Duties
• Ability to implement and audit security controls
• Ability to manage vulnerability scanning tools and common vulnerability frameworks
• Knowledge of endpoint security tools (EDR/XDR), including antivirus and malware mitigation tools
• Ability to oversee and manage SIEM platforms
• Ability to think critically, analyze risk, consider possible solutions, and make recommendations
• Demonstrated ability to communicate effectively both verbally and in writing with diverse groups of organizations and people
• Ability to develop relationships with and provide guidance to all levels of management regarding employee system access
• Ability to maintain the highest professional standards
• Ability to be accurate, thorough, and productive with all work
• Demonstrated understanding of networking ports and protocols, traffic flow, system administration, defense-in-depth, and common security elements
• Ability to manage security incident responses, post-incident investigations, and communicate updates to University stakeholders
• Demonstrated understanding of federal and state security standards, including FERPA, NIST 800 Series, PCI Compliance Regulations, and the Commonwealth of Virginia
• Knowledge of firewalls and IDS/IPS technologies as it relates to secure environments
• Demonstrated adaptability and the ability to grow within the information security field
• Demonstrated understanding of technical, engineering, and programmatic capabilities related to information systems and/or subsystems
• Ability to develop and create parsers for ingesting logs into SIEM platforms

Education, Experience, Licensure, Certification Required :

Education:

• High school graduate or equivalent education/experience that equates to a high school diploma

Experience:

• Significant experience within the information security field
• Moderate experience in a leadership or managerial role
• Experience managing security systems to include architecture, design, installation, operational planning, and/or risk remediation activities on an enterprise level
• Experience performing information security tasks such as performing IT/technical audits, security vulnerability assessments, system configuration verifications, and/or security-related assignments
• Possession of a current and maintained Information Security certification such as a CISSP, CISM, or similar.

Additional Consideration(s):

Education:

• BA or BS in Information Security, Information Assurance, Computer Science, or related equivalent professional experience
• A master’s degree in Computer Science, Cybersecurity, or related technical field

Experience:

• Significant experience working with centralized logging solutions (e.g., parsing logs, developing dashboards and reports)
• Experience with vulnerability scanning
• Experience with compliance verification tools
• Experience with system authorizations and supporting security documentation development such as System Security Plans (SSP), security architecture, system access requests, Risk Assessments, and Plans of Actions and Milestones (POA&M)
• Experience in incident responses to include investigating, remediating, and/or documenting security issues
• Experience conducting university-wide security training programs
• Experience working in a higher education environment
• Experience developing Standard Operating Procedures and/or playbooks

Salary Information:

Salary $78,063 to $97,579, Commensurate with Education and Experience

CNU Information:

This position includes Commonwealth of Virginia and Christopher Newport University employee benefits. CNU offers a comprehensive benefits package to include retirement plans, medical, dental, vision, and a variety of other options. Available leave includes vacation, sick time, personal time, and volunteer/service leave. State employees are eligible for discounted travel, banking, legal and retail services, among others. To view more information about our benefits, please visit https://cnu.edu/hr/benefits/.

Role Code:

39113

Conditions of Employment:

• This is a classified position. New and returning classified employees are required to complete a 12-month probationary period.
• Selected candidate must attend a 2-day New Employee Orientation Program.
• This position is designated as an on-campus position and requires regular in-person work at the university’s campus.
  • Selected candidate must be able to perform their duties on campus during assigned work hours.
  • This position is not eligible for full-time remote work, and requests to negotiate a fully remote arrangement will not be considered.
  • Any telework opportunities are limited, subject to university policy and departmental approval, and may be modified or discontinued at any time.

Is this position telework eligible?

Yes

Telework Eligibility Disclaimer:

This position is eligible for periodic telework as determined by the department. Eligibility is not guaranteed, and is subject to supervisor approval. Eligibility will depend on the likelihood of the employee’s success in a telework arrangement and the supervisor’s ability to manage telework. Departments and/or Human Resources may modify or revoke eligibility at any time. Employees will be required to sign a Telework Agreement.

Light Lifting (less than 20 lbs.):

Essential

Moderate Lifting (20-50 lbs.):

Marginal

Heavy Lifting (more than 50 lbs.):

Marginal

Pushing/Pulling:

Marginal

Standing:

Essential

Sitting:

Essential

Bending:

Essential

Walking:

Essential

Climbing:

Non-Applicable

Reaching:

Essential

Repetitive Motion:

Essential

Fast Pace:

Essential

Average Pace:

Marginal

Multiple Priorities:

Essential

Intense Customer Interaction:

Essential

Multiple Stimuli:

Essential

Frequency Changes:

Essential

Memory:

Essential

Reasoning:

Essential

Hearing:

Marginal

Reading:

Essential

Anlyzing:

Essential

Logic:

Essential

Verbal Communication:

Essential

Written Communication:

Essential

Posting Number:

PS1263P

Number of Vacancies:

1

Posting Date:

10/08/2026

Closing Date:

10/16/2026

Open Until Filled:

No

Special Instructions to Applicants:

CNU will only accept online applications through the jobs.cnu.edu website. Online applications must be received by midnight on the closing date indicated in a job announcement. Faxed, emailed, hand-delivered or mailed applications and attachments will NOT be accepted. Applicants are welcome to complete an online application by using computers located in the Office of Human Resources. Address: CNU North – 321 Hiden Boulevard, Suite 101, Newport News, VA 23606. Public computers are also available in nearby libraries and at the Virginia Employment Commission. Address: 600 Butler Farm Road, Hampton, VA 23666 (M-F 9am-4:30pm).
In order to be considered for this position, your application must provide evidence of experience and/or education supporting the requirements outlined in the posting. We encourage you to be clear and specific when describing your experience. *Responses to supplemental questions alone are not considered evidence of experience and/or education.

Quick Link for Direct Access to Posting:

https://jobs.cnu.edu/postings/21283

EEO/Diversity Statement(s):

Christopher Newport University, an EO Employer, is fully Committed to Access and Opportunity.
Notice of Non-Discrimination & Title IX Policy Statement

Reasonable Accommodation Request:

Christopher Newport University (CNU) will make a reasonable effort to accommodate persons with disabilities in the application and/or interview process. Persons with disabilities who require accommodation should contact the CNU Human Resources Office by calling [phone].

Alternative Hiring Process:

In support of the Commonwealth’s commitment to inclusion, we are encouraging individuals with disabilities to apply through the Commonwealth’s