Information Security Officer (Onsite)

East Central College • Orchard Park, CO

8d • Onsite

About The Position

Under the direction of the Executive Director of Information Technology Services (ITS), the Information Security Officer (ISO) supports the development, implementation, and ongoing coordination of the College’s information security and privacy program. The Information Security Officer (ISO) collaborates with ITS leadership, technical staff, and campus stakeholders to promote a secure, compliant, and resilient technology environment. The ISO supports the alignment of security practices with institutional priorities, regulatory requirements, and risk management principles while providing guidance on information security best practices, contributing to policy development, and advancing campus-wide security awareness, training, and continuous improvement through a collaborative, shared-responsibility approach.

Requirements

• Graduation from a regionally accredited college or university with a Master’s degree in Information Security, Cybersecurity, Information Technology, or a closely related field.
• Minimum of five (5) years of experience in information security, cybersecurity, or a related information technology field, with demonstrated involvement in areas such as security operations, incident response, vulnerability management, or security monitoring.
• Effective written and verbal communication skills are essential.
• Ability to work collaboratively with ITS staff and campus stakeholders.
• Strong organizational skills.
• Ability to manage multiple priorities.
• Commitment to ongoing professional development to stay current with evolving security threats and technologies.

Nice To Haves

• Relevant security certifications (e.g., Security+, CISSP, CISM, or similar) are preferred.

Responsibilities

• Assists the Executive Director of Information Technology Services in developing, reviewing, and maintaining information security policies, procedures, standards, and guidelines in alignment with best practices and applicable compliance requirements.
• Supports periodic security risk assessments and helps identify areas of potential exposure, recommending practical mitigation strategies appropriate to institutional resources.
• Monitors, investigates, and responds to security incidents and alerts—including managed detection and response (MDR) services, Security Information and Event Management (SIEM) systems, endpoint protection, and email security threats—while coordinating incident response, documentation, communication, and follow-up activities.
• Supports vulnerability management by reviewing security findings, coordinating remediation efforts, collaborating with ITS teams to maintain secure systems, and providing guidance on security controls, data protection, and the secure use of technology resources.
• Contributes to the development and delivery of security awareness, education, and training programs for faculty, staff, and students.
• Assists in preparing documentation and responses to support internal and external audits.
• Monitors information security and privacy compliance requirements and communicates security updates, emerging threats, and risk information to ITS leadership and campus stakeholders.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior