Lead IT Security & Compliance Operations

Commonwealth of VA Careers; Virginia (IL); On-site; USD 90,000 - 110,000; Full time

Job summary

Virginia Tech seeks an IT security leader to protect a critical 24x7 environment supporting executive management. Reporting to the Deputy Executive Director, Business and Management Systems, the role delivers security and compliance services across departments and ensures uptime.

The candidate will manage CIS IG2, Defender for Endpoint, run vulnerability testing, and lead security training. Strong communication and enterprise security experience are required.

Qualifications

• Bachelor’s degree in a related field or equivalent experience.
• Significant information security, audit, and/or compliance experience.
• Ability to own and manage multiple projects and programs.
• Strong written and oral communication across a broad range of campus audiences.
• Experience using security tools to perform vulnerability testing.
• Ability to install and administer Unix/Linux, OSX or Windows Server systems.
• Ability to install and configure security software or hardware applications.
• Ability to understand technical concepts and policy implications quickly.
• Strong analytical, organizational, and problem-solving skills.

Responsibilities

• Manage CIS IG2 compliance across areas.
• Manage Defender for Endpoint to prevent/detect/respond to threats.
• Coordinate and run security training programs for data protection and policies.
• Run vulnerability checks on department servers and web apps.
• Assist in design and implementation of access protection and audit controls.
• Routinely monitor access and security of systems and data.
• Communicate threats and mitigation strategies to supported areas.
• Guide procurement and security review processes.
• Provide guidance for IT risk assessments.
• Lead and mentor employees in compliance and risk activities.
• Serve as liaison between offices and IT Security Office.
• Document procedures to support consistent processes.
• Advise Deputy Executive Director on IT security policies and standards.

Skills

Information security

Compliance

Project management

Communication skills

Vulnerability testing

Unix/Linux/Windows Server admin

Security software configuration

Technical self-learning

Analytical skills

Education

Bachelor’s degree in related field

Master’s degree in business information technology

CISA, CISM, CRISC, CISSP certification

Tools

OWASP ZAP

nikto

nmap

Splunk

Defender for Endpoint

Snort

Nessus

Rapid7

Burp Suite

Metasploit

OSSEC

OSSIM

Job description

Virginia Tech seeks an IT security leader to protect a critical 24x7 environment supporting executive management. Reporting to the Deputy Executive Director, Business and Management Systems, the role delivers security and compliance services across departments and ensures uptime.

The candidate will manage CIS IG2, Defender for Endpoint, run vulnerability testing, and lead security training. Strong communication and enterprise security experience are required.