Job Title: IT Sec/Privacy Risk Manager
Location: Tallahassee, FL
Regular/Temporary: Regular
Full/Part Time: Full-Time
Job ID: 48444
Department 108000 Information Technology ServicesEqual Employment Opportunity An Equal Opportunity/Access/Affirmative Action/Pro Disabled & Veteran Employer.

FSU's Equal Opportunity Statement can be viewed at: http://www.hr.fsu.edu/PDF/Publications/diversity/EEO_Statement.pdfResponsibilities Provides specialized technical expertise and consultation with campus unit data owners and custodians to identify and implements robust risk management operating procedures and to assist managers in ongoing risk mitigation initiatives and procedures. Maintains a standard of excellence in the risk and privacy evaluation process through gap analysis, design assessment, and ongoing critique of information technology systems supporting the mission of the University with regard to IT security risk exposure. Supports University compliance with select legislated and contractual information technology compliance requirements.

Coordinates the development of FSU's information technology strategic risk management program with Director. Assists with development, implementation, and maintenance of organizational information privacy policies and procedures in coordination with appropriate administrative or executive offices. Communicates risk mitigation and privacy strategies to upper levels of management. Assists with development of collaborative approaches and partnerships in managing information privacy resources and initiatives across campus.

Engages in enterprise and campus unit information risk and privacy assessments and related monitoring activities in coordination with other compliance and operation assessment functions. Acts as subject matter expert and recommends and implements corrective measures to technical challenges that may threaten information privacy and security standards. Assists campus units as necessary in the data discovery process.

Provides risk and privacy management outreach and support to all campus units. Regularly convey knowledge and standards updates to information privacy operation units for the appropriate application. Monitors advancements in information privacy technologies to ensure campus adaptation and compliance. Seeks continuous feedback from campus operational units.

Assists enterprise and campus units in meeting and sustaining compliance with Payment Card Industry - Data Security Standards.

Assists in the review of campus IT contracts/agreements that may include sharing of information classified as protected and private with outside entities. Other duties as assigned.

Performs duties in compliance with ITS policies, guidelines, and processes pertaining to support requests, work orders, project management, change management, and incident management. Appropriately utilizes associated tools in accordance with ITS standards.Qualifications Bachelor's degree in Computer Science, MIS or other appropriate degree and four years of experience or a high school diploma or equivalent and experience equal to eight years.
(or a combination of appropriate post high school education and experience equal to eight years.)

A valid driver's license or the ability to obtain one.

Certified Information Systems Auditor certification.

Risk/Info Control Certification

Info Sys Security Prof CISSP Certification

Ability to convey technical information to technical and nontechnical users and the ability to utilize problem solving skills

Ability to deal with crises and manage sensitive information.

Ability to gather, interpret, report, and/or edit information and to document existing and new processes.

Ability to identify complex problems and review related information to develop and evaluate options and implement solutions.

Ability to perform accurately in a detail-oriented environment.
.
Knowledge of applicable computer software and operating systems.

Ability to write and/or proofread and edit written word and/or information in various formats.

Ability to perform assigned responsibilities with minimal to moderate supervision.

Knowledge of information technology security measures.

Knowledge of information processing and transmission equipment.

The ideal candidate should have effective verbal and written communication skills, general experiences in IT risk compliance, understanding of Information Technology organizational structure, and the ability to review standard IT contract terms & conditions.Preferred The Preferred experiences include, but not limited, knowledge of NIST Cybersecurity Framework, FERPA, GDPR, & HIPAA, Cybersecurity and Privacy project management, IT contract reviews, and IT risk controls mapping and Impact Assessment.Pay Plan This is an A&P (Administrative and Professional) position.Schedule If not otherwise specified, schedule is M-F, 8-5.Criminal Background Check This position requires successful completion of a criminal history background check, to include fingerprinting. The background check will be conducted as authorized and in accordance with University Policy 4-OP-C-7-B11.How To Apply If qualified and interested in a specific job opening as advertised, apply to Florida State University at https://jobs.fsu.edu. If you are a current FSU employee, apply via myFSU > Self Service.

Applicants are required to complete the online application with all applicable information. Applications must include all work history up to ten years, and education details even if attaching a resume.Open until filled This position is being advertised as open until filled.

Application will be reviewed as the are received and will continue until position is filledTobacco Free Campus Effective January 1, 2014, tobacco use, including simulated tobacco use, is prohibited on property, interior and exterior, owned or managed by Florida State University. This policy applies to all Florida State University students, employees, consultants, contractors, visitors, and external individuals.