Chief Information Security Officer (CISO) at George Mason University

Chief Information Security Officer (CISO)

Department: Information Technology

Classification: Administrative Faculty

Job Category: Administrative or Professional Faculty

Job Type: Full-Time

Work Schedule: Full-time (1.0 FTE, 40 hrs/wk)

Location: Fairfax, VA

Workplace Type: Hybrid Eligible

Salary: Salary commensurate with education and experience

Criminal Background Check: Yes

Security Clearance Check: Yes

About the Department:

Mason's Information Technology Services (ITS) organization provides information technology resources, systems, services, tools, and training to the university community. ITS's mission is to advance Mason's strategic goals, support learning, enable scholarly endeavors, and improve institutional management by effectively leveraging the resources of ITS's supporting groups.

About the Position:

George Mason University recognizes the importance of information security and has a targeted focus on data as an asset. The Chief Information Security Officer (CISO) ensures that Mason has the right leadership, processes, technology, and tools to effectively meet current and future information security threats. The CISO provides vision and leadership to oversee and enhance an information security program for the university's central systems and its decentralized computing environment, while also supporting information technology risk and compliance objectives in the process.

Responsibilities:

Policy and Program Leadership:

• Develops, communicates, and oversees the implementation of a strategic, comprehensive information security and risk roadmap for Mason and for ITS.
• Works with Mason leadership to identify risks to the confidentiality, integrity, and availability of university systems and data.
• Provides leadership in the enforcement of security and associated policies.
• Provides guidance and influences the university with regard to network and computing security needs.
• Collaborates with and supports IT colleagues to monitor, assess, and test security solutions.

Compliance, Audit, and Standards:

• Develops and enhances an information security governance framework.
• Coordinates and tracks information security related audits.
• Ensures that the ITSO provides timely and documented responses to security concerns.
• Develops and implements plans to ensure compliance with applicable laws and regulations.

Risk Management and Incident Response:

• Manages a broad range of complex security and risk-related issues in information technology.
• Evaluates Mason's security environment and provides strategic risk guidance.
• Leads and coordinates institutional responses to security incidents.
• Develops and enhances an information security and risk management awareness training program.

Required Qualifications:

• Master's degree in related field or equivalent combination of education and experience.
• Extensive mid/senior level leadership and managerial experience.
• Extensive cybersecurity experience with IT security standards.
• Expert leadership experience.
• Demonstrated strong interpersonal and communications skills.

Preferred Qualifications:

• Experience working in a higher education or a research environment.

Instructions to Applicants:

For full consideration, applicants must apply for the Chief Information Security Officer (CISO) at https://jobs.gmu.edu/. Complete and submit the online application to include three professional references with contact information, and provide a cover letter and resume.

Posting Open Date: December 9, 2024

Posting Close Date: January 17, 2025