Shire Veteran Jobs

Deputy Chief Information Security Officer (CISO)

Wayne State University is searching for an experiencedDeputy Chief Information Security Officer (CISO)at its Detroit campus location.

Wayne State is a premier, public, urban research university located in the heart of Detroit, Michigan where students from all backgrounds are offered a rich, high-quality education. Our deep-rooted commitment to excellence, collaboration, integrity, diversity and inclusion creates exceptional educational opportunities which prepare students for success in a global society.

Essential functions (job duties):

Job Purpose

This position will function as the deputy Chief Information Security Officer (CISO). With support of the CISO this position with be responsible for reviewing and participating in university projects to identify risk and advise on the appropriate controls for those risks. This position will be heavily focused on supporting research initiatives and third-party vendor risk but will also assist in supporting other complex IT projects. This position will also take a key role in education of the campus in regulatory and compliance requirements that are driving the need for this position.

Essential Functions

Identify and track current and future projects that have information security requirements. Identify risks, advise on the proper technical and administrative controls required to mitigate risk.

Collaborate with research technology and other IT teams that are responsible implementation of security controls.

Design methodologies for communicating new and existing regulatory requirements to University stake holders. Advise stakeholders and influence action, when needed.

Review new grants and contracts to identify contractual requirements that require specific information security controls and advise when contractual obligations for information security cannot be met by the University.

Participate in project teams and other oversight committees as a representative of the information security team.

Identify new and emerging technologies that will be required to support future regulatory compliance as it applies to information security as well as participating in the budgeting process to identify funding for these technologies.

Perform other related duties as assigned.

WORK CONTEXT

Job Reports to: Senior Director/Chair.

Leadership Accountability: Implements operating plans.

Customer Accountability: Interfaces with customers outside the S/C/D.

Freedom to Act: Operates with significant autonomy.

Qualifications:

MINIMUM QUALIFICATIONS

Education

Bachelor's degree.

Bachelor’s degree in Information Security or computer related field.

CISSP or equivalent certification.

Advanced knowledge practice of National Institute of Standards and Technology (NIST) and Cybersecurity Maturity Model Certification (CMMC) and Controlled Unclassified Information (CUI) preferred.

Experience

Expert (established subject matter expert, 7+ years experience).

Minimum 7 years’ experience in computer/network security field. Experience with major computer operating systems and how they are affected by InfoSec issues. Experience evaluating technology solutions and conducting analysis of the business needs/expectations, technical capability and associated security risk. Experience conducting information security assessments and presenting the results and remediation solutions to customers in an understandable format. Previous experience in a Higher Ed or other similar research institution is not required but preferred.

Knowledge, Skills and Abilities

TECHNOLOGY SKILLS

Intermediate knowledge of computing architecture and network design including cloud-based applications. Experience working with large data sets and the basic processes for de-identification and data suppression. must be familiar with CMMC and the NIST 800-171 security framework plus have at least working knowledge of regulations such as HIPAA.

ANALYTICAL SKILLS

Analyzes the impact of potential actions. Demonstrates the ability to apply analytical and logical thinking to gather and analyze information. Proposes, evaluates alternative solutions to achieve organizational goals. Must be able to analyze complex security risks and threats, as well as security incidents and breaches, and develop strategies to mitigate the risks and respond to these incidents.

PROBLEM SOLVING SKILLS

Identifies and resolves problems in a timely manner. Anticipates the implications and consequences of situations and takes appropriate action to be prepared for contingencies. Leads groups in problem analysis and process improvement initiatives.

INTERPERSONAL SKILLS

Relates to people in an open, friendly and acceptable manner. Effectively balances the interests and needs of own group with the broader organization. Resolves conflicts and disagreements and builds consensus.

SUPERVISORY SKILLS

This position does not have any direct supervisorial requirements but may be asked to assist as a backup for management task such as timecard approvals and/or other administrative tasks.

LEADERSHIP SKILLS

Demonstrates strong leadership skills that can influence and motivate individuals and groups to achieve results. Ability to establish clear goals and direction for teams or subordinates.

TEAMWORK and PEER RELATIONSHIPS

Ability to work through and with others at all organizational levels to ensure work is completed and objectives are met. Ability to be a contributing and constructive member of University committees and task forces. Demonstrates the ability to build a collaborative or team environment within responsible or assigned areas.

PLANNING AND PROJECT MANAGEMENT SKILLS

Ability to shift priorities and multi-task on various projects. Accurately scopes out length and difficulty of tasks and projects. Realistically estimates time and resource requirements on projects. Ability to plan and lead groups on large or complex projects. Develops strategies to achieve organizational goals.

CUSTOMER FOCUS

Establishes and maintains effective relationships with customers and gains their trust and respect. Proactively identifies customer issues and quickly and effectively resolves customer problems. Establishes customer service standards and objectives.

COMMUNICATION SKILLS

Ability to provide direction, influence actions needed, and guidance in information security matters to departments across campus. Expresses oneself clearly in conversations and interactions with others. Expresses oneself clearly and concisely in writing. Concisely summarizes large or complex issues both verbally and in writing.

School/College/Division:

H25 - Computing & Info Technology

Primary department:

H2501 - Office of Assoc VP & CISO C&IT

Employment type:

• Regular Employee

• Job type: Full Time

• Job category: Staff/Administrative

Funding/salary information:

• Compensation type: Annual Salary

• Salary minimum: $100,000

• Salary hire maximum: $125,000

Working conditions:

Normal office environment.

Job openings:

• Number of openings: 1

• Reposted position: No

Background check requirements:

University policy requires certain persons who are offered employment to undergo a background check, including a criminal history check, before starting work. If you are offered employment, the university will inform you if a background check is required.

Equal employment opportunity statement:

Wayne State University provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. The university encourages applications from women, people of color and other underrepresented people. Wayne State is an affirmative action/equal opportunity employer.