Information Security Supervisor - RISC and Disaster Recovery Planning

University of Michigan; Ann Arbor (MI); Hybrid; USD 110,000 - 140,000; Full time

Benefits offered by this job

Generous time off

Two-for-one retirement match

Comprehensive health insurance

Life insurance

Long-term disability

Flex spending accounts

Dental & Vision

Job summary

The University of Michigan Information and Technology Services (ITS) Information Assurance department seeks a supervisor to lead the Responsible Information Security for Campus (RISC) and Disaster Recovery Planning teams. You will supervise staff, set priorities, and work hands-on with campus partners to protect university information and ensure continuity of critical services.

You will oversee risk assessments, security consultations, and third-party reviews, while guiding outreach and training

Qualifications

• Bachelor's degree in cybersecurity or related field.
• Six+ years IT or information security with customer service and priority management.
• Two+ years supervisory/management experience including mentoring and performance feedback.
• Experience conducting or leading security risk assessments or consultations.
• Experience with higher education or large decentralized organizations.
• Experience with disaster recovery or business continuity planning.
• Experience reviewing security of third-party vendors or services.
• Experience collaborating with stakeholders to reduce risk.
• Experience managing student or intern workers.
• Proven ability to improve team processes and service delivery.
• Ability to build collaborative relationships and lead through changing priorities.
• Experience leading campus outreach or security education services.
• Familiarity with information security frameworks and university data protection requirements.
• Strong written and verbal communication skills.

Responsibilities

• Supervise, coach, and develop staff across RISC and Disaster Recovery Planning functions.
• Manage incoming requests and workloads with clear expectations for response times and quality.
• Identify opportunities to improve workflows and report on service demand and outcomes.
• Provide input to leadership on staffing needs and budget planning.
• Guide security risk assessments and consultations with campus units.
• Lead security review processes for third-party services and contracts.
• Build productive relationships with campus units and communicate risks.
• Support security training, outreach, and ongoing conversations about risks and resources.
• Oversee disaster recovery planning service and ensure governance compliance.
• Coordinate with ITS and university teams on cross-functional initiatives.

Skills

Leadership

Communication

Staff development

Stakeholder management

Risk awareness

Education

Bachelor's degree in cybersecurity

Job description

Competitive salary available based on qualifications, experience and education of the selected candidate.

Job Summary

Information and Technology Services (ITS) Information Assurance is seeking a supervisor to lead the Responsible Information Security for Campus (RISC) and Disaster Recovery Planning teams. The supervisor will lead staff members who help University of Michigan units understand and meet their responsibilities for protecting university information and systems and planning for disruptions to critical services.

The RISC team works directly with campus units to conduct security risk assessments, provide security consultation, review third-party services, answer questions, and deliver presentations and outreach. The Disaster Recovery Planning group works with ITS service owners to develop and maintain plans for restoring services after a disruption.

This position combines day-to-day staff supervision with hands-on leadership of campus-facing services. The supervisor will set priorities, develop staff, maintain strong relationships with campus partners, and improve the timeliness, consistency, and impact of the teams' work. They will help ensure that risks identified through assessments are clearly communicated, tracked, and followed through to resolution.

Positions that are eligible for hybrid or mobile/remote work mode are at the discretion of the hiring department. Work agreements are reviewed annually at a minimum and are subject to change at any time, and for any reason, throughout the course of employment. Learn more about the work modes.

Who We Are

Information and Technology Services (ITS) supports U-M faculty, researchers, staff, and students in their use of technology to teach, learn, research, and work, and be leaders in their fields. We are dedicated to creating cohesive digital experiences and promoting university wide innovations. ITS's mission is to be trusted enablers of technology for the U-M community. ITS works together to provide cohesive digital experiences and seamless support to the U-M community. For more information about ITS, visit: https://its.umich.edu/about

Responsibilities

Team leadership and operations

• Supervise, coach, and develop staff across the RISC and Disaster Recovery Planning functions. Assign and prioritize work, provide regular feedback, conduct performance reviews, support professional development, and participate in hiring.
• Manage incoming requests and team workloads to provide timely, consistent service. Establish clear expectations for response times, work quality, documentation, and communication with campus partners.
• Identify opportunities to improve workflows, use team capacity effectively, and report on service demand, progress, and outcomes.
• Provide input to Information Assurance leadership on staffing needs, service priorities, and budget planning.

Security consultation and campus engagement

• Guide the team's security risk assessments and consultations with campus units. Help staff communicate findings in practical terms and work with stakeholders to track and address identified risks.
• Lead and improve security review processes for third-party services and contracts, collaborating with university teams such as Central Procurement and the Office of General Counsel to identify risks, ensure requirements are met, and support informed purchasing decisions.
• Build productive relationships with campus units and help them understand their role in the university's shared responsibility for security.
• Support presentations, educational outreach, and ongoing conversations with units about security risks, good practices, and available resources.
• Bring feedback and emerging concerns from campus partners to Information Assurance leadership to inform service improvements and security priorities.
• Provide subject-matter expertise and content input into the development, review, and continuous improvement of cybersecurity training courses to ensure content reflects current threats, university policies, and established security standards.

Disaster recovery planning and service coordination

• Supervise the Disaster Recovery Planning service, including coordination with units to develop, review, and maintain plans for critical services. Ensure service is following service governance lifecycle processes.
• Connect security consultations and campus engagement with opportunities to strengthen disaster recovery planning.
• Coordinate with other ITS and university teams on initiatives that depend on clear communication, effective service management, and broad campus engagement.

Required Qualifications

• Bachelor's degree in cybersecurity or a related field..
• At least six years of related IT or information security experience involving customer service, confidentiality, independent judgment, organization, and the ability to manage competing priorities.
• At least two years of supervisory or management experience that includes staff mentoring, work assignment, performance feedback, career development, and/or team building.
• Experience conducting or leading security risk assessments, security consultations, or comparable work that helps organizations identify and address information security risks.
• Experience providing security services in higher education or another large, decentralized organization.
• Experience with disaster recovery planning or business continuity planning.
• Experience reviewing the security of third-party vendors or services.
• Experience working directly with stakeholders to understand their needs, explain security responsibilities, and develop practical approaches to reducing risk.
• Experience managing student or intern workers.
• Demonstrated ability to improve team processes and service delivery, including prioritizing requests, tracking work, and following up on identified issues.
• Ability to build collaborative relationships across teams and lead staff through changing priorities.
• Experience leading campus outreach, security presentations, or a broadly used security education service.
• Familiarity with information security frameworks, university data protection requirements, and the shared responsibility model.
• Strong written and verbal communication skills, including the ability to present security topics to audiences with different levels of technical knowledge.

Desired Qualifications

Master's degree in cybersecurity, or related field.

Benefits At The University Of Michigan

In addition to a career filled with purpose and opportunity, The University of Michigan offers a comprehensive benefits package to help you stay well, protect yourself and your family and plan for a secure future. Benefits include:

• Generous time off
• A retirement plan that provides two-for-one matching contributions with immediate vesting
• Many choices for comprehensive health insurance
• Life insurance
• Long-term disability coverage
• Flexible spending accounts for healthcare and dependent care expenses
• Dental and Vision Insurance
• Parental and Maternity Leave

Application Deadline

Job openings are posted for at least seven calendar days. The review and selection process may begin as early as the eighth day after posting. This opening may be removed from posting boards and filled anytime after the minimum posting period has ended.

U-M EEO Statement

The University of Michigan is an Equal Opportunity Employer. We are committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants, including protected veterans and individuals with disabilities.