Senior Deputy CISO — Strategic InfoSec Leader

Western Carolina University Inc; Cullowhee (NC); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Tuition waivers for up to three C/yr

Free group exercise classes

Discounted campus recreation center

Free vaccines and boosters on campus

Pretax flexible spending accounts

Job summary

Western Carolina University is seeking a Deputy Chief Information Security Officer to lead risk governance, regulatory compliance, and security operations. The role reports to the Chief Information Security & Privacy Officer and guides security policy, third‑party risk reviews, and incident response strategies.

The position drives risk awareness, coordinates audits, and ensures alignment with NIST CSF and CIS Controls across the university's IT landscape.

Qualifications

• Bachelor’s degree in cybersecurity, computer science, information systems, business analytics, or a related field.
• Five years of progressively responsible experience across multiple information security functions, such as governance, risk, compliance, security operations, incident response, identity and access management, infrastructure security, or third-party risk.
• Demonstrated experience coordinating complex security initiatives across technical teams and business units.
• Working knowledge of networking, systems administration, endpoint security, identity and access control, cloud or hosted services, vulnerability management, and incident response practices.
• Experience developing or implementing security policies, risk assessments, control documentation, audit responses, or remediation plans.
• Excellent oral, written, and interpersonal communication skills, including the ability to explain technical concepts and risk in non-technical terms.
• Strong analytical, organizational, and problem-solving skills; ability to manage concurrent priorities with appropriate attention to detail.
• Ability to obtain and maintain CISSP certification within eighteen months of appointment if not already certified.

Responsibilities

• Lead technology risk assessments across university systems, business units, and third parties with remediation plans.
• Coordinate audit preparation and response for internal and external audits and state reviews.
• Oversee regulatory compliance across FTC Safeguards Rule, FERPA, UNC System policies, and state/federal requirements.
• Own the human risk program including phishing simulations and security awareness training.
• Develop and maintain information security policies, standards, and control frameworks aligned to NIST CSF and CIS Controls.
• Inform prioritization for the broader technology organization and drive remediation sequencing and investment decisions.

Skills

Security leadership

Governance, risk, compliance

Incident coordination

Policy development

Third-party security review

Executive communication

Collaboration and customer service

Planning and documentation

Education

Bachelor’s degree in cybersecurity, computer science, information systems, business analytics, or a related field

Master’s degree in cybersecurity, information systems, business administration, or a related field

Job description

Western Carolina University is seeking a Deputy Chief Information Security Officer to lead risk governance, regulatory compliance, and security operations. The role reports to the Chief Information Security & Privacy Officer and guides security policy, third‑party risk reviews, and incident response strategies.

The position drives risk awareness, coordinates audits, and ensures alignment with NIST CSF and CIS Controls across the university's IT landscape.