Strategic IT Security & Compliance Leader

Virginia Tech; Blacksburg (VA); On-site; USD 90,000 - 110,000; Full time

Job summary

Virginia Tech is seeking an information security leader to protect university systems and data across executive leadership areas. The role oversees compliance, incident response, disaster recovery, and security assessments for a 24/7 unit, with after-hours work as needed.

The candidate will manage endpoint protection, run vulnerability checks, and mentor staff while aligning with university policies and standards. Strong communication and multi-project governance are essential.

Qualifications

• Bachelor's degree in Business Information Technology, CS, or related field or related equivalent experience.

Responsibilities

• Manage compliance with CIS IG2 throughout supported areas.
• Manage Microsoft Defender for Endpoint for supported areas to prevent, detect, investigate, and respond to advanced cyber threats.
• Coordinate and run security training programs for data protection and adherence to university standards and policies.
• Run scripts and programs to provide vulnerability checks against department servers and web applications.
• Assist in the design and implementation of appropriate access protection and audit control procedures.
• Routinely monitor practices to ensure that user access, system access, resources and information are secure.
• Communicate threats, findings, and mitigation strategies effectively to supported areas when necessary.
• Manage, and participate in, the procurement and departmental security review processes.
• Provide guidance, tools, and subject matter expertise for departments performing IT risk assessments.
• Lead, develop, and mentor employees involved in compliance and risk-related activities.
• Serve as liaison between supported offices and the IT Security Office.
• Author and improve documentation to support consistent and reliable procedures.
• Work with and advise Deputy Executive Director on IT security policies and standards.

Skills

Information security

Policy compliance

Project management

Effective communication

Security testing

Education

Bachelor's degree in Business Information Technology / Computer Science or related field

Master's degree preferred

Tools

OWASP ZAP

nikto

nmap

Defender for Endpoint

Splunk

Job description

Virginia Tech is seeking an information security leader to protect university systems and data across executive leadership areas. The role oversees compliance, incident response, disaster recovery, and security assessments for a 24/7 unit, with after-hours work as needed.

The candidate will manage endpoint protection, run vulnerability checks, and mentor staff while aligning with university policies and standards. Strong communication and multi-project governance are essential.