Director - IT Security

Tennessee Board of Regents•Memphis, TN

About The Position

This is a full-time permanent, fiscal year position in the Division of Administrative Services reporting to the Deputy Chief Information Officer. The Director of IT Security provides strategic leadership and oversight of the institution’s cybersecurity posture. This critical role ensures that the College’s information systems are protected from internal and external threats by developing, implementing, and maintaining security protocols and training programs. The Director will guide security-related decisions, proactively manage risk, and promote a culture of cybersecurity awareness across the organization.

Requirements

Bachelor’s degree in Information Technology, Cybersecurity, Audit or a related field.
Three (3) to five (5) years of relevant IT experience with a focus on cybersecurity.
CISSP certification (or equivalent experience) is a plus.
Project Management certification (e.g., PMP) is a plus.
Demonstrated knowledge of network security technologies, protocols, and practices.
Proven ability to communicate effectively with both technical and non-technical stakeholders.
Strong interpersonal, verbal, and written communication skills.
Excellent problem-solving, analytical, time management, and organizational skills.

Nice To Haves

Experience in higher education or similarly complex environments.
Familiarity with security compliance frameworks (e.g., NIST, FERPA, HIPAA).
Leadership experience in cross-functional IT teams or cybersecurity projects.

Responsibilities

Lead the College’s information security program, including development and delivery of cybersecurity awareness training and policy education.
Collaborate with departments including Internal Audit and Finance/Controller to identify risks and implement IT risk mitigation strategies.
Research and stay current on emerging cybersecurity threats, tools, and trends.
Monitor institutional networks and systems for security breaches; respond to and investigate incidents as needed.
Provide leadership, guidance, and supervision to security, identity management, and compliance staff.
Oversee the College’s incident response plan and ensure policy compliance; lead efforts to remediate violations.
Direct the implementation of security tools such as firewalls, encryption, and monitoring software.
Recommend and implement IT security standards and best practices.
Assist technical staff and end users with the deployment and understanding of security tools and practices.
Coordinate and conduct periodic IT security audits.
Maintain up-to-date knowledge of cybersecurity through professional development and industry resources.
Perform other duties as assigned.