Division Head, Information Security

Associated Universities Inc. • Green Bank, WV

9d • $130,000 - $160,000

About The Position

The National Radio Astronomy Observatory (NRAO), managed and operated by Associated Universities, Inc. (AUI) under a cooperative agreement with the National Science Foundation, seeks an experienced information security professional or chief information security officer for its Division Head, Information Security role. The Division Head provides strategic, operational, and technical leadership for the Observatory’s enterprise information security program and reports directly to the Deputy Chief Information Officer.

The Division Head will establish, implement, and sustain a comprehensive cybersecurity strategy that protects the Observatory’s scientific, operational, and enterprise technology environments while enabling its scientific mission. The role will lead a major transformation of information security capabilities, address vulnerabilities and cyber-threat exposure, and establish foundational security processes, technologies, governance, and operational practices. The candidate must be able to engage directly with technical teams on complex exposures and practical remediation, while building a sustainable cybersecurity function and guiding organizational change.

The position may be based in Albuquerque or Socorro, New Mexico; Charlottesville, Virginia; or Green Bank, West Virginia. A remote arrangement may be considered for well-qualified candidates. Work is typically performed in a research or development environment. Occasional domestic and international travel may be required.

Requirements

• Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, Engineering, or a related discipline; highly relevant experience may be considered in lieu of a bachelor’s degree.
• At least seven years of extensive technical knowledge and experience directing staff in support of scientific or technical research.
• Comprehensive understanding of the NIST Cybersecurity Framework and other recognized cybersecurity standards and control frameworks.
• Experience establishing enterprise security policies, control standards, risk assessment processes, and compliance programs.
• Experience conducting cybersecurity maturity assessments and translating findings into prioritized remediation initiatives.
• Ability to develop risk-based security investment strategies and measurable program improvement objectives.
• Experience establishing or leading security operations and incident response capabilities.
• Strong organizational change management, stakeholder engagement, and cross-functional leadership skills.
• Ability to establish governance and accountability while maintaining productive working relationships with scientific and technical communities.
• Experience managing budgets, vendor relationships, technology investments, and multidisciplinary security teams.
• Must be authorized to work in the United States; the Observatory cannot sponsor H-1B visas for this position.

Nice To Haves

• Professional certifications such as CISSP, CISM, CISA, CRISC, or equivalent advanced cybersecurity credentials.
• Experience serving as a CISO, Deputy CISO, Director of Information Security, or equivalent cybersecurity executive.
• Experience developing or transforming cybersecurity programs within research institutions, national laboratories, universities, federally funded research organizations, or other scientific computing environments.
• Familiarity with cybersecurity challenges involving high-performance computing, scientific instrumentation, research networks, and large-scale data processing.
• Experience securing Linux-intensive infrastructure environments and open-source technology ecosystems.
• Familiarity with research and education identity federation, distributed authentication, and scientific collaboration platforms.
• Familiarity with federal cybersecurity requirements, contractual security obligations, and security expectations applicable to federally funded research organizations.
• Experience developing cybersecurity metrics, executive scorecards, and security maturity reporting frameworks.

Responsibilities

• Lead the transformation of the Observatory’s cybersecurity posture by identifying and addressing systemic security weaknesses, architectural vulnerabilities, immature operational processes, and gaps in security technologies and controls.
• Develop, implement, and maintain an enterprise information security strategy aligned with the Observatory’s scientific mission, organizational priorities, and technology modernization initiatives.
• Establish an enterprise cybersecurity operating model that defines security functions, processes, responsibilities, accountability, service delivery expectations, and collaboration with technology organizations.
• Balance cybersecurity controls with requirements for scientific openness, high-performance computing, external collaboration, and operational flexibility.
• Develop, maintain, and enforce cybersecurity policies, standards, procedures, and technical control requirements across the Observatory.
• Develop governance mechanisms to review security implications of technology acquisitions, infrastructure modernization, software development, and scientific computing initiatives.
• Integrate cybersecurity requirements into technology architecture standards, operational procedures, procurement activities, and project delivery.
• Collaborate with the Associate Director of Data Management and Software, Deputy CIO, technology architects, infrastructure engineering, Science IT, and other stakeholders to establish security requirements and coordinate implementation.
• Provide cybersecurity posture assessments, material risk reports, remediation progress updates, and investment recommendations to the Deputy CIO and other designated Observatory leadership.
• Establish or lead security operations and incident response capabilities, including procedures, operational playbooks, and security monitoring standards.
• Coordinate technical remediation activities across multiple engineering and operations teams.

Benefits

• Paid time off, including 13 holidays and annual accrual of up to 24 vacation days.
• Medical, dental, and vision plans effective on the first day of employment, subject to eligibility requirements.
• Retirement benefit equal to 10 percent of a qualified participant’s base pay, with no required employee contribution.

What This Job Offers

• Job Type: Full-time
• Career Level: Director