Deputy Chief Information Officer, Chief Information Security & Privacy Officer

University of Illinois Urbana-Champaign•Urbana, IL

1d•Hybrid

About The Position

The University of Illinois Urbana-Champaign seeks an exceptional Chief Information Security and Privacy Officer to provide campus-wide leadership for a comprehensive cybersecurity, identity and access management, and privacy program that supports the university’s academic, research, and administrative missions. The ideal candidate is a strategic, collaborative leader with deep experience in cybersecurity and risk management, proven ability to guide policy and governance in a complex environment, and a deep commitment to operational excellence. This individual will set multiyear roadmaps, lead institutional incident response, partner closely with university counsel and campus leadership, and ensure compliance with evolving regulatory requirements for a major Research 1 institution. Candidates should bring substantial management experience; demonstrated success communicating with both technical and non-technical audiences; and the judgment, integrity, and relationship-building skills required to advance a resilient, forward-looking security posture for the university. Hybrid work options may be available for this position, with the ability to be on-site at the University of Illinois Urbana-Champaign campus as needed per the University’s Workplace Flexibility policy. Sponsorship for work authorization is not available for this position. Why Work at Technology Services? Highlights of Employee Benefits Job Summary The Chief Information Security and Privacy Officer (CISO/PO) provides institution-wide leadership in developing and implementing comprehensive strategies for information security and privacy at the University of Illinois Urbana-Champaign. This executive role supports academic, research, and administrative functions while ensuring compliance with applicable laws, regulations, policies, and industry best practices.

Requirements

Bachelors degree.
Ten years of professional experience in IT, IT administration, or risk management, with significant responsibility in cybersecurity/information security.
Five years of management experience in information technology.
Demonstrated experience leading organization-wide initiatives.
Demonstrated experience in budgetary and programmatic planning.
Demonstrated experience managing complex, cross-organizational initiatives.
Leadership experience in information security.

Nice To Haves

Advanced degree in information technology, information security, privacy, or a related field.
Five years of experience in one or more domains of information security or privacy.
Leadership experience in a complex institution encompassing teaching, research, or administration.
Demonstrated commitment to diversity, equity, and inclusion in service delivery.
Professional certifications such as CISSP, CRISC, CISM, CIPP/US, or CIPM.

Responsibilities

Prioritize privacy and security risk management in alignment with institutional risk frameworks and institutional missions.
Lead the development of multi-year roadmaps for information security, identity and access management, and privacy across on-premise, cloud, and third-party platforms.
Serve as the primary institutional advocate for privacy, promoting awareness and integration of privacy principles into technology, processes, and training.
Advise university counsel, senior leadership, and stakeholders on information security and privacy matters.
Direct the Identity, Privacy, and Cybersecurity group, including budget oversight and personnel management.
Collaborate with other Technology Services groups and staff to enhance risk mitigation strategies.
Support strategic planning and ensure alignment with organizational goals.
Partner with university leaders, governance bodies, and technologists to strengthen foundational IT capabilities through strategic investments and resource planning.
Supervises and supports staff through regular guidance, coaching, and performance management to ensure quality service and operational excellence.
Oversee and mature risk management processes across the university and the University of Illinois System.
Lead campus-wide information security and privacy incident response programs.
Serve as the official point of contact for security incidents, including coordination with law enforcement.
Collaborate with university counsel and System leadership on policy violations and external complaints.
Monitor compliance with privacy laws and regulations including FERPA, HIPAA, GDPR, and institutional policies.
Maintain awareness of emerging threats and develop strategies to mitigate their impact on university operations.
Lead the development and maintenance of institutional policies, standards, and procedures related to information security and privacy.
Ensure policies reflect current legislation and regulatory requirements relevant to a Research 1 institution.