EXECUTIVE DIRECTOR FOR INFORMATION SECURITY & CHIEF INFORMATION SECURITY OFFICER

Emporia State University•Emporia, KS

44d•$130,000 - $160,000

About The Position

Developing, and implementing secure processes and systems used to prevent, detect, mitigate, and recover from cyberattacks. Educating and managing information and technology risk in collaboration with business leaders.Building and driving a cybersecurity strategy and framework, with initiatives to secure the organization's cyber and technology assets. Maintain Professional Knowledgebase; keep apprised of latest security and privacy legislation, regulations, advisories, alerts, and vulnerabilities pertaining to ESU.Continuously evaluating and managing the cyber and technology risk posture of the organization.Implementing and managing the cyber governance, risk, and compliance process. Developing, justifying, and evaluating cybersecurity investments. Developing and implementing ongoing security awareness training and education for users. In coordination with the CIO and emergency management team, implementing disaster recovery protocols and business continuity plans with business resilience in mind.

Requirements

Bachelor's degree; preference for advanced degree.
Minimum of five years' experience in information security or equivalent.
Strong commitment to customer-focused and team-oriented management.
Proven leadership abilities with a history of advancing roles in security management.
Proficiency in project planning, implementation, and management.
Demonstrated capability in collaborating with diverse populations.
Experience handling sensitive and confidential information in compliance with federal and state laws.
Skilled in presenting complex security concepts to various audiences (e.g., end-user training, executive-level briefings).
Up-to-date knowledge of emerging information security technologies and strategies.
Availability for off-hours support when necessary.

Responsibilities

Developing and implementing secure processes and systems to prevent, detect, mitigate, and recover from cyberattacks.
Educating and managing information and technology risk in collaboration with business leaders.
Building and driving a cybersecurity strategy and framework.
Maintaining a professional knowledgebase of security and privacy legislation.
Evaluating and managing the organization's cyber and technology risk posture.
Implementing and managing the cyber governance, risk, and compliance process.
Developing and evaluating cybersecurity investments.
Developing and implementing security awareness training and education for users.
Implementing disaster recovery protocols and business continuity plans.