Strategic AVP, Information Security & Risk

The Chronicle Of Higher Education, Inc.; Tampa (FL); On-site; USD 180,000 - 270,000; Full time

Job summary

The University of Tampa seeks an Assistant Vice President, Information Security to lead a multi-year security strategy, report to the CIO/CISO, and guide a team protecting student and institutional data amid an evolving threat landscape.

This strategy-first role requires presenting to Cabinet and board audiences, overseeing ISO 27001 ISMS, and aligning security investments with university priorities while partnering across ITS and campus stakeholders.

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, or a related field.
• 10+ years IT/security experience with leadership
• CISSP or equivalent certification preferred
• Experience developing and executing a security strategy
• Knowledge of ISO/IEC 27001 and risk management processes

Responsibilities

• Owns and maintains the university's multi-year information security strategy and roadmap.
• Sets and sequences security priorities using risk-based judgment.
• Communicates security posture and program progress to executive audiences.
• Integrates security into strategic planning, budgeting, and major initiatives.
• Develops annual security budget and multi-year investment plan.
• Leads CSIRT and BCEIRT, ensuring plans are tested and understood.
• Oversees a modern security posture across IAM, cloud, endpoint, and data protection.
• Manages ISO/IEC 27001 ISMS and compliance activities.
• Builds and retains a high-performing security team and drives security awareness.

Skills

Leadership

Security strategy

Executive briefing

Communication

Budgeting

Risk management

Vendor management

AI risk

Education

Bachelor's degree in Information Technology or related field

Job description

The University of Tampa seeks an Assistant Vice President, Information Security to lead a multi-year security strategy, report to the CIO/CISO, and guide a team protecting student and institutional data amid an evolving threat landscape.

This strategy-first role requires presenting to Cabinet and board audiences, overseeing ISO 27001 ISMS, and aligning security investments with university priorities while partnering across ITS and campus stakeholders.