Information Security Program Manager

CNU's Center For American Studies; Newport News (VA); On-site; USD 78,000 - 98,000; Full time

Job summary

Christopher Newport University seeks an Information Security Manager to lead the university's information security program, protecting critical information assets and aligning security strategy with campus objectives.

The role requires managing incident responses, vulnerability management, and security documentation across enterprise systems. A strong background in GRC, policy development, and cross-functional leadership is essential.

Qualifications

• Advanced knowledge of security best practices, GRC, and risk management.
• Ability to align security strategies with business objectives and drive policy/framework.
• Experience hiring, training, and guiding security engineers and incident responders.
• Deep knowledge of access controls, least privilege, security policy and separation of duties.
• Experience auditing security controls and managing vulnerability tools.
• Knowledge of endpoint security tools (EDR/XDR) and malware mitigation.
• Ability to lead SIEM platforms and security operations.
• Strong communication with diverse stakeholders and management levels.

Responsibilities

• Manage and implement a security program protecting university information assets.
• Oversee security architecture, design, installation, and risk remediation at enterprise level.
• Lead incident response, post-incident investigations, and communications with stakeholders.
• Develop and maintain security policies, SOPs and documentation (SSP, architecture, access requests).
• Coordinate vulnerability scanning, logging, dashboards, reports, and compliance efforts.

Skills

GRC knowledge

Security roadmap

Incident response

SIEM management

Endpoint security

Vulnerability scanning

Security policy

Risk analysis

Education

High school diploma

BA/BS in Information Security or related field

Master’s degree in CS/Cybersecurity or related field

Job description

Christopher Newport University seeks an Information Security Manager to lead the university's information security program, protecting critical information assets and aligning security strategy with campus objectives.

The role requires managing incident responses, vulnerability management, and security documentation across enterprise systems. A strong background in GRC, policy development, and cross-functional leadership is essential.