Director of Information Security

Maryland Connect•Patuxent Riding, MD

1d•$140,000 - $150,000•Onsite

About The Position

The Director of Information Security position is responsible for developing and executing information security controls and processes that support the academic, research, and administrative missions of the university in a timely and balanced manner. The Director will lead the Information Security Officer (ISO), oversee Information Assurance Specialists, and directly advise and report to the CIO. This role requires a cybersecurity leader with deep technical expertise, a collaborative mindset, and a strong understanding of the regulatory landscape and operational complexities in higher education. The Director will also be responsible for managing external audits at the direction and guidance from the Controller, including coordination with state auditors, the Office of Legislative Audits (OLA), and other external agencies.

Requirements

Bachelors degree in computer science or related field.
10+ years of progressive experience in cybersecurity leadership, preferably in higher education, government, or large organizations.
Proven success in building and leading cybersecurity programs in complex, hybrid environments.
Experience with modernization efforts, including cloud-native security tools, real-time asset inventories, and automation.
Expertise in compliance frameworks (e.g., NIST, ISO 27001, SOC 2).
Strong knowledge of privacy regulations such as GDPR, CCPA, and other global/domestic data protection laws.
CISSP certification required.

Nice To Haves

Advanced degree in Cybersecurity, Computer Science, or a related field (MS preferred).
Experience with federally protected data and academic research security.
Familiarity with student data privacy and IT governance in higher education.

Responsibilities

Advise, develop and maintain a university-wide information security program aligned with institutional goals and regulatory standards (e.g., FERPA, HIPAA, GLBA, NIST, GDPR, CCPA).
Oversee the ISO and Information Assurance Specialists, ensuring effective execution of security operations and compliance initiatives.
Advise on the design and implementation of secure cloud infrastructure and zero-trust architecture using both open-source and commercial solutions.
Management and accountability for incident response planning and execution, including post-incident analysis and reporting.
Coordinate and support audits conducted by state agencies, the OLA, and external partners.
Develop, deliver and promote cybersecurity awareness initiatives across the university community.
Collaborate with academic, research, and administrative units to advise on secure and compliant use of technology and data.
Manage cybersecurity vendor relationships, and strategic investments in security technologies.
Support CIO with grant applications, research partnerships, and accreditation efforts by demonstrating strong cybersecurity postures.