Chief Information Security Officer (CISO) at Cooperative Education

Department: Information Technology

Classification: Administrative Faculty

Job Category:Administrative or Professional Faculty

Job Type:Full-Time

Work Schedule:Full-time (1.0 FTE, 40 hrs/wk)

Location: Fairfax, VA

Workplace Type:Hybrid Eligible

Salary:Salary commensurate with education and experience

Criminal Background Check:Yes

Security Clearance Check: Yes

About the Department:

Mason's Information Technology Services (ITS) organization provides information technology resources, systems, services, tools, and training to the university community. ITS's mission is to advance Mason’s strategic goals, support learning, enable scholarly endeavors, and improve institutional management by effectively leveraging the resources of ITS's supporting groups.

About the Position:

The Chief Information Security Officer (CISO) ensures that Mason has the right leadership, processes, technology, and tools to effectively meet current and future information security threats. The CISO provides vision and leadership to oversee and enhance an information security program for the university’s central systems and its decentralized computing environment, while also supporting information technology risk and compliance objectives. The CISO reports to Mason’s Vice President for Information Technology and Chief Information Officer (CIO) and will be a member of the ITS leadership team.

Responsibilities:

Policy and Program Leadership:

• Develops, communicates, and oversees the implementation of a strategic, comprehensive information security and risk roadmap for Mason and for ITS.
• Works with Mason leadership to identify risks to the confidentiality, integrity, and availability of university systems and data.
• Provides leadership in the enforcement of security and associated policies.
• Provides guidance and influences the university regarding network and computing security needs.
• Collaborates with and supports IT colleagues to monitor, assess, and test security solutions.

Compliance, Audit, and Standards:

• Develops and enhances an information security governance framework to guide Mason’s information security compliance efforts.
• Coordinates and tracks information security related audits at all internal, state, and federal levels.
• Ensures that the ITSO provides timely and documented responses to security concerns.
• Develops and implements plans to ensure compliance with applicable laws, regulations, and requirements.
• Ensures that Mason’s IT Security policies are up to date.

Risk Management and Incident Response:

• Manages a broad range of complex security and risk-related issues in information technology.
• Evaluates Mason’s security environment and provides strategic risk guidance.
• Leads and coordinates institutional responses to security incidents.
• Documents and publishes security standards, processes, and procedures.
• Develops and enhances an information security and risk management awareness training program.

Required Qualifications:

• Master’s degree in related field or equivalent combination of education and experience.
• Extensive mid/senior level leadership and managerial experience.
• Extensive cybersecurity experience with IT security standards or frameworks.
• Demonstrated experience with evolving state-of-the-art information security technologies.
• Expertise in risk management approaches to assess and address security risks.
• Demonstrated strong interpersonal and communications skills.
• Top Secret clearance or ability to obtain one within 6 months of hire.
• Required industry certifications such as CISSP, CCISO, or CISM.

Preferred Qualifications:

• Experience working in a higher education or a research environment.
• Direct knowledge in specific technical areas of systems administration or network operations.

Instructions to Applicants:

For full consideration, applicants must apply for the Chief Information Security Officer (CISO) at https://jobs.gmu.edu/. Complete and submit the online application to include three professional references with contact information, and provide a cover letter and resume.

Posting Open Date: December 9, 2024

Posting Close Date: January 17, 2025