Posting Details

Position Information

Working Title Chief Information Security Officer (CISO) Position Number 612223 Appointment Type EHRA Non Faculty - At Will Tenure Track No FTE 1 = 40 hours/week, 12 months If time limited, duration date Position Overview

Primary Function of Organizational Unit

The Chief Information Security Officer (CISO) reports to the Chief Information Officer, is a member of the CIO leadership team and serves a key role in university leadership, working closely with senior administration, academic leaders, and the campus community. The CISO is an advocate for North Carolina Central University’s overall information security technology needs and awareness planning. This position will be responsible for developing a comprehensive information security strategy and for conducting ongoing policy and procedure reviews to meet IT compliance requirements. The CISO leads the development and implementation of a security program that leverages collaborations and campus-wide resources, facilitates information security governance, advises senior leadership on security direction and resource investments, and designs appropriate policies to manage information security risk. This position must also be knowledgeable in a variety of IT Security technologies. The complexity of this position requires a leadership approach that is engaging, innovative, and collaborative, with a sophisticated ability to work with other leaders to set the best balance between security strategies and other priorities at the campus level.

Primary Purpose of Position

The primary purpose of this position is to provide strategic leadership for the University’s information security program. Work with campus leadership to oversee the continual operations and improvement of university-wide information security program. This includes resources, governance and policies organized toward a common cause in information security. Lead information security planning processes to establish an inclusive and comprehensive information security program for the entire institution in support of academic, research, and administrative information systems and technology. Establish annual and long-range security and compliance goals, define security strategies, metrics, reporting mechanisms and program services; and create maturity models and a roadmap for continual program improvements. Stay abreast of information security issues and regulatory changes affecting higher education at the state and national level, participate in national policy and practice discussions, and communicate to campus on a regular basis about those topics. Represent the university on committees and boards associated with the University of North Carolina consortia and in national and regional consortiums and collaborations. Develop and provide ongoing IT Security Awareness initiatives and communication for students, faculty and staff. Provide leadership, direction and guidance in development assessment and evaluation of information security risks and monitor compliance with security standards and appropriate policies and make appropriate recommendations. Responsible for working with appropriate agencies, coordinating and tracking all information technology and security related audits including scope of audits, colleges/units involved, timelines, auditing agencies and outcomes. Develop a strategy for cohesively dealing with audits, compliance checks and external assessment processes for internal / external auditors, PCI, ITAR, HIPAA, FISMA and other applicable standards. Keep abreast of security incidents and act as primary control point during significant information security incidents. Convene a Security Incident Response Team (SIRT) as needed, or requested, in addressing and investigating security incidents. Develop, implement and administer technical security standards, as well as a suite of security services and tools to address and mitigate security risk. Examine impacts of new technologies on North Carolina Central University’s overall information security. Establish processes to review implementation of new technologies to ensure security compliance. Use appropriate technologies to monitor, mitigate and respond to security and compliance events.

Required Knowledge, Skills, and Abilities

The successful candidate must possess knowledge of Internal Audit, System Auditors, outside consultants and/or Office of the State Auditor in a lead capacity to coordinate representation of institutional technology systems and practices is highly desired; knowledge of laws and standards governing Information Security compliance for example, ISO27002, ISO27005, NIST 800, FERPA, PCI, NC Identify Theft Protection Act, ediscovery, ADA, DMCA, GDPR; knowledge and experience in the policy and regulatory environment of information security, particularly in higher education, is highly desirable; knowledge of computes and information security, network security issues, and security incident response and recovery in a higher education environment is highly desirable; ability to exhibit maturity, reliability, composure, and stability under pressure as required for handling on-the-job challenges is essential; ability to give and receive constructive criticism and feedback; ability to advise and collaborate with senior management is required; ability to work in a team/collaborative environment with a broad range of constituencies is essential. The position requires an intelligent, articulate, consensus-building, and persuasive leader who can work effectively with senior administration, academic leaders, and the campus community and communicate information security-related concepts to a broad range of technical and non-technical staff.

Minimum Education/Experience

A Bachelor’s Degree in Management Information Science or other related field and/or an advanced degree is preferred.

Professional certification (e.g., CISSP) is highly desirable. Candidates lacking such certification may be competitive if they present comparable credentials or involvement in continuous professional development.

Licenses or Certification required by Statute or Regulation

N/A

Equal Opportunity Employer

North Carolina Central University is an equal opportunity and affirmative action employer. All qualified applicants will receive consideration for employment without regard to age, color, disability, gender, gender expression, gender identity, genetic information, national origin, race, religion, sex, sexual orientation, or status as a protected veteran.

Posting Detail Information

Posting Number EPA01632P Open Date 04/09/2019 Date desired for closing or initial review Close Date Open Until Filled Yes Date Position Available 04/30/2019 Special Instructions to Applicants Applicant Documents Required Documents

1. Resume/CV
2. Cover Letter

Optional Documents

Supplemental Questions

Required fields are indicated with an asterisk (*).