Information Security Officer

The Chronicle Of Higher Education, Inc.; City of Schenectady (NY); On-site; USD 95,000 - 100,000; Full time

Benefits offered by this job

Generous Vacation, Sick, and Personal

Winter Recess Break

Healthcare: Medical, Dental, Vision

On-Campus Fitness Facility Access

403(b) Retirement Plan

Salary Continuation Disability

Tuition Exchange

Job summary

Union College in Schenectady, NY seeks an Information Security Officer to provide strategic and operational leadership for the institution’s information security program. The ISO will lead policy development, awareness training, incident response, risk management, and IT architecture to safeguard data and systems.

The role requires collaboration with campus leadership and a track record in higher education security, with a strong emphasis on regulatory compliance and enterprise-wide security

Qualifications

• Bachelor’s degree or the equivalent in education and experience.
• Minimum five years of relevant experience in information security.
• Experience working in higher education preferred.
• Experience presenting complex security concepts to diverse audiences.
• Familiarity with PCI, FERPA, HIPAA, and NIST 800 series.
• Knowledge of network and authentication protocols, encryption, and information security technologies.
• CISSP, GIAC or similar certification preferred.
• Ability to work independently and as part of a team.
• Excellent oral, written, and interpersonal communication skills.
• Attention to detail and time management in a fast-paced environment.

Responsibilities

• Coordinate the College’s information security program.
• Establish and maintain information security programs in collaboration with campus community.
• Provide information security awareness and training; incident response and management; risk assessment and management; and relevant IT architecture.
• Develop and maintain the campus information security roadmap for technology services, systems, networks, and data.
• Conduct and review vulnerability assessments and coordinate organizational security assessments.
• Develop, maintain, and review security configuration data for software and services.
• Approve, review and audit firewall rules maintained by the network vendor.
• Inspect system, network log and event data for integrity and anomalies as needed.
• Participate in strategic planning as a member of ITS management.
• Collaborate with ITS staff to track and implement information security initiatives.
• Communicate policies, practices, and awareness to the College community.
• Manage incident response procedures for security incidents and external requests.
• Assist in vendor/product assessments to evaluate information security risks.

Skills

Information security knowledge

Policy development

Training/awareness

Incident response

Vulnerability assessment

Networking protocols

SIEM

Education

Bachelor’s degree or equivalent

Tools

Next-generation firewalls

VPN

Network access controls

Data encryption

SIEM

Job description

Reporting to the chief information officer (CIO), the Information Security Officer (ISO) is responsible for the strategic and operational direction of Union’s information security program. The ISO works collaboratively with campus leadership and stakeholder groups to build shared ownership of information security across the institution. The position develops and maintains programs including information security policy and standards; information security awareness and training; information security incident response and management; risk assessment and management; and information security-related information technology (IT) architecture. The ISO demonstrates a commitment to ensure that data in all forms, as well as the systems and networks used to transmit, store, and provide access to it are designed, configured, and operated in a manner that ensures security, integrity, privacy, and compliance with statutory and regulatory requirements.

Position Title: Information Security Officer

Pay Status and Classification: Exempt, Regular Full-Time, In-Person. This position is not eligible for relocation assistance or visa sponsorship.

Supervisor: Chief Information Officer

Position Purpose: Reporting to the chief information officer (CIO), the Information Security Officer (ISO) is responsible for the strategic and operational direction of Union’s information security program. The ISO works collaboratively with campus leadership and stakeholder groups to build shared ownership of information security across the institution. The position develops and maintains programs including information security policy and standards; information security awareness and training; information security incident response and management; risk assessment and management; and information security-related information technology (IT) architecture. The ISO demonstrates a commitment to ensure that data in all forms, as well as the systems and networks used to transmit, store, and provide access to it are designed, configured, and operated in a manner that ensures security, integrity, privacy, and compliance with statutory and regulatory requirements.

Essential Responsibilities and Duties:

• Coordinate the College’s information security program.
• Establish and maintain information security programs in collaboration with the campus community including policy and standards.
• Provide information security awareness and training; incident response and management; risk assessment and management; and relevant IT architecture to ensure the security of all sensitive data collected, processed, stored, and transmitted.
• Develop and maintain the campus information security roadmap for ensuring the security of technology services, computer systems, data networks, and data.
• Conduct and review ongoing vulnerability assessments of IT systems and coordinate periodic information security assessments at an organizational level.
• Develop, maintain, and review security configuration data insecurity software and/or services.
• Approve, review and audit firewall rules maintained by the network managed service vendor.
• In collaboration with network managed service vendor, inspect system, network log, and event data for integrity and anomalies when necessary.
• As a member of the ITS management team, participate in strategic planning and development of goals and objectives.
• Collaborate with ITS staff to track and implement information security initiatives.
• Facilitate the communication of policies, practices, and awareness to the College community.
• Manage and coordinate incident response procedures to track and address information, system and network security incidents, alleged policy violations, and external requests or complaints.
• Assist in vendor and/or product assessments to evaluate information security risks.
• Perform additional duties as assigned; duties, responsibilities, and activities may change at any time with or without notice.

Qualifications:

• Bachelor’s degree or the equivalent in education and experience or a combination of relevant education, training, certifications, and work experience.
• Minimum five years of relevant experience in information security or related field.
• Experience working in higher education preferred.
• Experience presenting complex security concepts to a variety of audiences or groups (e.g. end-user training, security conference presentations, executive-level briefings).
• Familiarity with information security and data breach law, standards; and federal, state, and local regulations including PCI, FERPA, HIPAA, and NIST 800 series.
• Knowledge of network and authentication protocols, encryption types, and information security technologies.
• Experience with data networking, VPN, next-generation firewalls, network access controls, security information and event management (SIEM), authentication protocols, data encryption, and other relevant technologies CISSP, GIAC or similar certification(s) preferred.
• Ability to work independently and as a member of a team, establish priorities, and work collaboratively as a member of a diverse community.
• Collaborative, constructive, and positive approach to work.
• Excellent oral, written, and interpersonal communication skills, including strong relationship skills.
• Attention to detail in both completion of work and documenting work products.
• Effective time management practices, applied in a fast-paced environment.

Compensation:

The annual salary range for this position is $95,000 to $100,000. Except for roles with a set rate of pay, the wage/salary of the finalist selected for this role will be set based on a variety of factors, including but not limited to departmental budgets, qualifications, experience, education, licenses, specialty, and training. The stated hiring rate/ range represents the College’s good faith and reasonable estimate of the rate/range of possible compensation at the time of posting.

Location: Schenectady, NY

We know some job seekers may not apply for career opportunities unless they meet every qualification in the position description including the preferred qualifications. We are most interested in hiring the best staff and faculty colleagues, and recognize that a successful candidate may come from a less traditional career path. We encourage you to apply, even if you don’t believe you meet everyone of our preferred qualifications.

We offer exceptional benefits including:

• Generous Vacation, Sick, and Personal Time
• Winter Recess Break in Addition to Paid Holidays (in accordance with policy)
• Healthcare: Medical (PPO & HDHP), Dental, and Vision Insurance (Flexible Spending and Dependent Care Accounts)
• Free On-Campus Fitness Facility Access and Discounts for On-Campus Wellness Programs
• Pre and Post Tax participation in a 403(b) Retirement Plan
• Salary Continuation Program in the event of Disability
• Tuition Exchange

Background Checks: In accordance with our background check policy, finalists for hire will undergo a background check that includes education, employment, and criminal convictions.

E-Verify Participation: Union College participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the United States. Learn more about E-Verify and your Right to Work (Derecho a Trabajar).