Chief Information Security Officer

Tennessee Board of Regents•Tullahoma, TN

1d•Onsite

About The Position

Leads and manages the institution’s information security strategy, operations, and compliance. Ensures the protection of data, networks, and systems across the entire institution. Oversees the daily operations, provides leadership, and guidance in the best practices of information security.

Requirements

Bachelor’s degree earned from an accredited institution
Four years of experience in an IT related field
Additional related post-secondary education can be substituted for the required experience on a year for year basis or the appropriate technical certifications.
Strong interpersonal skills and the ability to effectively communicate with a wide range of individuals and constituencies.
Ability to establish and maintain effective professional relationships with students, colleagues and other stakeholders.
Knowledge of customer service principles and practices and the ability to effectively apply them in the higher education environment.
Advanced working knowledge of information security terminology, best practices, and compliance regulations.
Ability to multitask and switch priorities as needed.
Ability to explain complex technical concepts in simple terms when the audience requires it.
Knowledge of basic budgeting concepts as they pertain to technology.
Must be able to lift and move items weighing up to 25 pounds.

Nice To Haves

Master’s degree earned from an accredited institution
Six years of experience in an IT related field (with a minimum of two years in a security capacity)
Possess at least one relevant security certification.

Responsibilities

Provide leadership and guidance to IT personnel related to information security operations and best practices.
Assess and manage a portion of the IT budget as it pertains to information security systems.
Leads, manages, configures, and supports applications and processes that pertain to information security, such as but not limited to security operations, compliance, cybersecurity, data governance, etc.
Manage business data while adhering to data governance, privacy, and compliance best practices.
Maintains awareness of how IT security services and systems affect the institution’s security posture and exposure; weighs business needs against security concerns and articulates any issues to constituents and senior leadership.
Perform advanced troubleshooting through diagnostic techniques and pertinent questions. Then determines the best course of action based on details provided by users and review of information security assets.
Ensures the CIO and Deputy CIO are kept informed of information security issues or incidents.
Collaborate with IT leadership on project management, change management, and long-term vision for the department.
Escalates unresolved issues and promotes collaboration with other IT leaders.
Develop and provide necessary reports, KPIs, and SLAs that align with the strategic plan of Motlow.
Leads, manages, supervises, and provides information security training on a routine basis to the entire Motlow community.
Responsible for managing and supervising incident response plans through leveraging security management log data, analysis, threat detection, and proper investigation methods.
To promote visibility, automation, detection, and investigation capabilities that allow the IT team to remediate threats faster, while adhering to best practice guidelines.
Instrumental in the development of new policies and procedures as they pertain to information security and IT operations overall.
Develops the proper procedures and timelines to ensure the Motlow community is adaptable to evolving security compliance regulations.
Assesses the selection, purchasing, and implementation of new information security systems while adhering to proper policies and guidelines.
Support documentation of knowledgebase, while properly recording events, problems, and resolutions in ITSM platform.
Participates and represents IT or Motlow in various committees, taskforces, or other groups as assigned by the CIO or Motlow leadership.
Other duties as assigned