IT Security Director

The Citadel•Charleston, SC

1d•Onsite

About The Position

The Citadel is seeking an experienced IT Security Director to lead and strengthen the institution's cybersecurity program. This position is responsible for protecting the confidentiality, integrity, and availability of the college's information systems and data through proactive security monitoring, risk management, security architecture, compliance initiatives, and campus-wide cybersecurity awareness. The IT Security Director serves as the institution's cybersecurity subject matter expert, working collaboratively with Information Technology Services and campus leadership to identify, assess, and mitigate cybersecurity risks while supporting the college's academic, administrative, and research missions. Reporting to the Associate Chief Information Officer, the IT Security Director provides leadership for enterprise cybersecurity operations, security strategy, risk management, and compliance. This position develops and implements security controls, investigates security incidents, oversees security awareness initiatives, and partners with campus stakeholders to ensure a secure technology environment.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field. Relevant experience may substitute for the degree on a year-for-year basis.
Progressive experience in information technology with a strong emphasis on cybersecurity.
Experience implementing enterprise security controls, risk management, incident response, and security monitoring.

Nice To Haves

Experience leading information security programs within higher education, government, or other complex organizations.
Knowledge of cloud security, vulnerability management, security monitoring, regulatory compliance, and security frameworks such as NIST or CIS.
Strong communication skills with the ability to present technical concepts, security risks, and strategic recommendations to executive leadership.
Experience developing cybersecurity strategies, policies, incident response procedures, and security awareness programs.
Project management experience and the ability to lead cross-functional technology initiatives.
CISSP certification (or equivalent professional cybersecurity certification) preferred.

Responsibilities

Lead the college's information security and cyber risk management program.
Monitor and respond to cybersecurity threats, vulnerabilities, and security incidents.
Conduct security investigations and identify root causes of security events.
Develop and implement security policies, standards, and best practices.
Perform enterprise risk assessments and recommend mitigation strategies.
Oversee security controls for on-premises infrastructure, cloud services, applications, and network environments.
Ensure compliance with state, federal, and institutional cybersecurity requirements.
Develop and maintain cybersecurity documentation, procedures, and technical standards.
Manage the college's cybersecurity awareness and training program, including phishing simulations and user education initiatives.
Provide weekly cybersecurity and security awareness training metrics to college leadership, including vulnerability status, threat activity, incident trends, phishing campaign results, compliance metrics, and recommendations for continuous improvement.
Collaborate with campus departments to improve the institution's overall security posture.