Director of Information Technology and Cybersecurity

George Mason University•Fairfax, VA

55d•Onsite

About The Position

The Director of Information Technology and Cybersecurity (DITC) reports to the Chief Business Officer (CBO) of the College of Public Health. This role ensures reliability of the College's IT operations and maintaining compliance with specialized IT certifications. The DITC plays a mission-critical role in supporting faculty, staff, and students by enabling efficient academic and research activities. Responsibilities include anticipating and responding to the College's evolving technology needs, leading IT initiatives, serving on leadership committees as a liaison to central university administration, and collaborating with academic and administrative units to address security concerns and operational challenges.

Requirements

Master's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or closely related field from an accredited institution is required with substantial directly related professional experience may be considered in exceptional cases.
Progressive experience (typically 7+ years) in management and oversight of information technology systems, with senior leadership or director-level role (typically 3+ years).
Proven experience in strategic IT planning, budgeting, and implementation.
Demonstrated leadership in designing, maintaining, and securing enterprise-level technology infrastructures in an academic or comparable complex environment.
Hands-on experience with cybersecurity policy development, risk management, and regulatory compliance (e.g., FERPA, GLBA, NIST, or HIPAA).
Experience managing IT teams, projects, and vendors, with a strong emphasis on user-centered service delivery.
Evidence of successful integration of emerging technologies and digital transformation initiatives.
Demonstrated expertise in cybersecurity issues and protocols.
Experience working in supervisory and project management roles.
Experience working with research computing.
Experience in a university setting.
Significant experience in consequential information technology and cybersecurity assurance/assignments.
Experience with database management and development, web design, and computer programming.
Background managing Linux and Windows servers.
Proficient in virtualization technologies and configuration management tools (e.g., KVM),
In-depth knowledge of health information privacy standards, particularly HIPAA.
Excellent organizational skills with consistent attention to detail.
Proven ability to lead and coordinate multiple projects simultaneously in a dynamic environment.
Strong understanding of federal and state privacy and security regulations, including compliance frameworks.
Demonstrated proficiency in computing and web technologies.

Nice To Haves

Health Information Systems Certified (CPHIMS).
Experienced in compliance and requirements for attaining/retaining Security Certification (CISSP or GIAC GSLC preferred).
Experience with infrastructure monitoring technologies and with SIEM (OSSEC, Splunk preferred).
Ability to develop and implement innovative technical solutions to support research projects.

Responsibilities

Executes a team-based strategy to minimize single-person dependencies for technology administration and management.
Mentors and plans professional development of staff to strengthen functional and technical skills.
Establishes and monitors team and individual goals to advance the units mission and ensures quality service delivery.
Evaluates the team's capacity and ensures alignment with strategic priorities.
Provides consultation to units regarding software platform needs and ensures readiness for Masons ASRB review process.
Ensures technology implementations are managed with strong project management oversight with an eye toward continuous improvement.
Provides divisional strategy and oversight for hardware technology investment, maintenance, replacement.
Oversees ongoing development of team standard operating procedures.
Oversees ongoing development and maintenance of functional and technical documentation to support continuity operations for technology platforms.
Oversees compliance with Masons technology security standards for hardware and software deployed in division.
Drives a culture of information security compliance within ITS.
Establishes and manages a "second line of defense" between ITS technical teams and auditors.
Leads reviews of cybersecurity compliance across ITS.
Coordinates audit response activities and manages communications with internal and external auditors.
Ensures technology infrastructure, operations, and services comply with university policies and state/federal regulations.
Identifies potential compliance risks and collaborates with IT Security and technical teams to implement remediations.
Documents and manages corrective action plans for audit findings.
Conducts annual reviews of ITS policies and procedures and coordinates necessary updates.
Maintains the ITS Disaster Recovery Plan and coordinates annual effectiveness tests.
Develops and maintains an Information Technology Risk Register.
Serves on interview or faculty committees as needed.
Manages personnel or interns assisting with compliance-related duties.
Supports temporary administrative functions within or outside ITS, as assigned by university leadership.