Information Security Officer

LM Wind Power / GE; City of Schenectady (NY); On-site; USD 95,000 - 100,000; Full time

Benefits offered by this job

Generous vacation and sick time

Health, dental, and vision insurance

Employee scholarships for training

403(b) retirement plan participation

Free fitness facility access

Job summary

LM Wind Power / GE in Schenectady, NY is seeking an Information Security Officer to lead and manage the institution's information security program. You will ensure that data and systems are secure and comply with regulatory requirements while collaborating with campus leadership.

The ideal candidate will have a bachelor’s degree, a minimum of five years of information security experience, and a strong understanding of security technologies and standards. The role offers a competitive salary package and a comprehensive benefits program.

Qualifications

• Minimum five years of relevant experience in information security or similar roles.
• Experience working in higher education preferred.
• Knowledge of security technologies and protocols.

Responsibilities

• Coordinate the college’s information security program.
• Develop and maintain security programs and policies.
• Conduct ongoing vulnerability assessments of IT systems.

Skills

Information security concepts

Data breach law and regulations

Interpersonal communication

Risk assessment and management

Education

Bachelor's degree or equivalent experience

Tools

VPN

Next-generation firewalls

SIEM

Job description

Information Security Officer

Reporting to the chief information officer (CIO), the Information Security Officer (ISO) is responsible for the strategic and operational direction of Union’s information security program. The ISO works collaboratively with campus leadership and stakeholder groups to build shared ownership of information security across the institution. The position develops and maintains programs including information security policy and standards; information security awareness and training; information security incident response and management; risk assessment and management; and information security-related information technology (IT) architecture. The ISO demonstrates a commitment to ensure that data in all forms, as well as the systems and networks used to transmit, store, and provide access to it are designed, configured, and operated in a manner that ensures security, integrity, privacy, and compliance with statutory and regulatory requirements.

Essential Responsibilities and Duties

• Coordinate the college’s information security program.
• Establish and maintain information security programs in collaboration with the campus community, including policy and standards.
• Provide information security awareness and training; incident response and management; risk assessment and management; and relevant IT architecture to ensure the security of all sensitive data collected, processed, stored, and transmitted.
• Develop and maintain the campus information security roadmap to ensure the security of technology services, computer systems, data networks, and data.
• Conduct and review ongoing vulnerability assessments of IT systems and coordinate periodic information security assessments at an organizational level.
• Develop, maintain, and review security configuration data in security software and/or services.
• Approve, review, and audit firewall rules maintained by the network managed service vendor.
• In collaboration with the network managed service vendor, inspect system, network log, and event data for integrity and anomalies when necessary.
• As a member of the ITS management team, participate in strategic planning and development of goals and objectives.
• Collaborate with ITS staff to track and implement information security initiatives.
• Facilitate the communication of policies, practices, and awareness to the college community.
• Manage and coordinate incident response procedures to track and address information, system, and network security incidents, alleged policy violations, and external requests or complaints.
• Assist in vendor and/or product assessments to evaluate information security risks.
• Perform additional duties as assigned; duties, responsibilities, and activities may change at any time with or without notice.

Qualifications

• Bachelor’s degree or an equivalent in education and experience, or a combination of relevant education, training, certifications, and work experience.
• Minimum five years of relevant experience in information security or a related field.
• Experience working in higher education preferred.
• Experience presenting complex security concepts to a variety of audiences or groups (e.g., end-user training, security conference presentations, executive-level briefings).
• Familiarity with information security and data breach law, standards, and federal, state, and local regulations including PCI, FERPA, HIPAA, and the NIST 800 series.
• Knowledge of network and authentication protocols, encryption types, and information security technologies.
• Experience with data networking, VPN, next-generation firewalls, network access controls, security information and event management (SIEM), authentication protocols, data encryption, and other relevant technologies.
• CISSP, GIAC, or similar certification(s) preferred.
• Ability to work independently and as a member of a team, establish priorities, and work collaboratively in a diverse community.
• Collaborative, constructive, and positive approach to work.
• Excellent oral, written, and interpersonal communication skills, including strong relationship skills.
• Attention to detail in both completion of work and documenting work products.
• Effective time-management practices, applied in a fast-paced environment.

Compensation and Location

The annual salary range for this position is $95,000 to $100,000. The final salary will be determined based on qualifications, experience, education, licenses, specialty, and training. Location: Schenectady, NY.

Benefits

• Generous vacation, sick, and personal time, including winter recess break and paid holidays (in accordance with policy).
• Health, dental, and vision insurance, including flexible spending and dependent care accounts.
• Free on-campus fitness facility access and discounts for on-campus wellness programs.
• Employee scholarships toward certifications, seminars, training, and professional development.
• Pre and post-tax participation in a 403(b) retirement plan.
• Salary continuation program in the event of disability.
• Tuition programs.

Background Checks

Finalists for hire will undergo a background check that includes education, employment, and criminal convictions.

E-Verify Participation

Union College participates in E-Verify and will provide the federal government with your Form I-9 information to confirm you are authorized to work in the United States.

Accommodations

If you require an accommodation throughout the interview process, please contact our Human Resources department at [e-mail] or 518-388-6108.

Diversity & Equal Opportunity

Union College is an equal-opportunity employer and is strongly committed to student and workforce diversity. We provide access and will provide reasonable accommodation. Union College will not discriminate in the recruitment or selection of faculty and employees, or in any other area of employment, on the basis of age, sex, race, national origin, religion, religious belief, disability, sexual orientation, gender identity or expression, or veteran status. In this regard, opportunities for advancement will be made available without bias. Union College will comply with the letter and intent of all State and Federal laws and applicable orders pertaining to Equal Employment Opportunity.