Director I, Chief Information Security Officer

Job Description:

Function of Position:

The Director, Chief Information Security Officer position within Technology Services is a subject-matter expert role, focusing on cybersecurity and the Gramm-Leach-Bliley Act (GLBA). This position will oversee a team supporting the operation of the colleges and related partners' technology components and infrastructure. This is a senior-level technical position, responsible primarily for the design, coordination, deployment, support, and maintenance of the college's systems and related technology components. This individual is responsible for 24/7 operations essential to the college's technology infrastructure and systems. The position reports to the Chief Information Officer.

Examples of Duties & Responsibilities:

Chief Information Security Officer Duties:

1. Design and manage college-wide secure identity and access systems such as single sign-on (SSO) and multi-factor authentication (MFA) systems. Adhere to and enforce the principle of least privilege access.
2. Maintain compliance with the Gramm-Leach-Bliley Act (GLBA).
3. Lead cloud security administration functions in Microsoft Azure/Microsoft 365/Amazon AWS.
4. Perform confidential discovery of sensitive personnel data at the direction of college administration.
5. Ensure the integrity and protection of college Information Technology assets; audit information systems to identify and protect areas of vulnerability.
6. Investigate, propose, and implement new and improved security products, processes, and procedures. Communicate to management IT security threats and opportunities relevant to the college.
7. Lead cybersecurity incident response problem identification, investigation, containment, and remediation functions.
8. Provide direction and guidance to any additional personnel focused on security.
9. Maintain sufficient system logging, scanning, and security monitoring to ensure appropriate response to anomalies and alerts.
10. Manage and test backup systems and processes to ensure appropriate protection of college data in the event of an outage or incident.
11. Participate in Risk Assessments, Vulnerability Assessments, Penetration Tests, Audits, security questionnaires, vendor security assessments, etc. Prioritize findings and identify and implement treatments that mitigate unacceptable risks.
12. Participate in Disaster Recovery plan development, testing, and response.
13. Manage department personnel, evaluate individual and team performance, formulate department and individual goals, hold staff meetings, and write progress reports for each area managed.

Systems Duties:

1. Lead the design, coordination, installation, configuration, operation, and maintenance of enterprise servers and services including all Windows Server Operating Systems and Unix variants (Linux, Solaris, AIX, etc.), as well as various embedded operating systems and all associated system software (e.g., backups, auditing, file/print sharing, applications, etc.)
2. Lead the design, development, implementation, and documentation of software and hardware solutions. Automate and improve systems functionality, security, and cohesiveness by programming and modifying appropriate components.
3. Develop project plans and establish timelines for major systems projects and initiatives.
4. Act as project team leader on systems projects and product/service integrations.
5. Communicate systems design changes and enhancements to support teams. Ensure change management and configuration controls & procedures are in place and adhered to.
6. Provide advice, mentoring, and training for mid-level specialists on complex systems.
7. Collaborate with other senior-level technical staff to engineer complex solutions to further the college's mission.
8. Research and analyze user requirements, engage with vendors to prepare and evaluate RFPs, and make recommendations on systems and information infrastructure.
9. Troubleshoot and solve systems-related technical problems. Handle escalation of complex systems issues from support teams.
10. Coordinate and maintain the necessary security controls over all systems. Integrate security into the design and build of technical solutions, and drive continuous improvement.
11. Ensure prompt application of vendor updates and patches, immediately in the case of critical or zero-day threats.
12. Perform appropriate evaluations of system utilization in order to ensure efficient use of resources.
13. Evaluate and propose new systems based on technical tradeoffs, security, and budgetary constraints.
14. Other duties as assigned.

MCC Expectations:

• Adheres to the College Code of Conduct.
• Contributes to, supports, and maintains an equitable, inclusive, and collaborative College environment.
• Maintains technological competencies utilized by the College.
• Commits to the philosophy of a comprehensive community college.
• Commits to professional growth. which includes seeking ongoing training in diversity, equity, and inclusion to better serve students.

Requirements:

Required Qualifications:

Education and Experience Qualifications:

1. Earned a master's degree in an information technology-related field from a regionally accredited higher education institution, OR Military Information Technology training and certification, AND seven years of experience in Information Technology and Cybersecurity, including managerial responsibility.
   Note: Multiple computer certifications may replace some academic computer coursework.
2. Demonstrated interpersonal, leadership, and verbal communication skills, evidenced by at least (7) seven years of experience supervising and developing staff, conducting performance evaluations, mentoring employees, leading meetings, and serving on organizational committees or workgroups. Proven ability to build relationships and communicate effectively with employees, leadership, external stakeholders, and non-technical audiences, translating complex technical concepts into clear, actionable information.
3. Operating systems technical expertise and successful systems management experience in ALL of the following operating systems: Windows, Windows Server, and Linux.
4. Technical experience with architecting and managing several of the following: Windows Active Directory, Azure/Microsoft 365, Microsoft Exchange, Microsoft SQL, VMware ESX, enterprise SAN, fiber channel switch infrastructure, and enterprise backup systems.
5. Experience with a wide range of standard office and network/systems management-based software packages.
6. Demonstrated commitment to self-learning emerging technologies and working in a team-based environment with expanding activities and quickly changing technologies.
7. Demonstrated experience in ALL of the following: access and identity management, enterprise network printing, enterprise file sharing, cloud administration, information security, failover clustering, and assorted network services.

Preferred Qualifications:

1. Earned doctoral degree in any field from a regionally-accredited higher education institution, AND (2) two years of recent work experience with information security, network or system administration
2. Bilingual and able to read, write, and speak Spanish, or other languages, proficiently

Additional Information:

Salary: Salary is determined based on experience, internal equity, and college budget. This position has a range of $93,000 to $120,000 and is based on the aforementioned factors.

MCC offers a Flexible Work Policy for benefit-eligible employees. Types of flexible work arrangements include flextime/staggered shifts, remote work/telecommuting, and compressed work schedule. The availability of flexible work arrangements varies by division, department, and position, based upon business and operational needs. Limitations to flexible work arrangements are outlined in the official policy.

Physical Demands and Working Conditions: The physical demands and working conditions described below are representative of those that must be met by an individual to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

This position involves primarily sedentary work, including prolonged periods of computer use and keyboarding. The role requires the ability to communicate effectively in verbal and written form. The position may involve occasionally lifting or moving items up to 10 pounds. Work is performed in a typical office environment with no adverse conditions. Occasional travel between campus buildings or to other local or out-of-town locations for meetings or conferences may be required.

Prohibition of Remote Work Outside New York State: Remote work locations outside New York State are not authorized by the College due to out-of-state tax and regulatory implications. In limited circumstances, prompted by business or operational needs, the College may approve requests to work remotely outside of New York State, on a short-term, temporary basis.

Application Instructions:

Interested applicants must apply online and create an account by clicking on the APPLY NOW tab below. Returning applicants may login to their Monroe Community College Careers Account to apply for this position. See the FAQ page for guidance using our online system. Please contact us if you need assistance applying through this website.

Applicants MUST submit the following documents* to be considered for this position:

1. Resume/CV
2. Cover Letter

*Official transcripts will be required upon employment. Applicants with foreign degrees must submit a completed credential evaluation comparing your foreign academic accomplishments to standards in the U.S

Please note: As part of the application process all applicants will be asked to provide the contact information for 3 professional references. References will only be contacted after interviews have occurred and only for applicants who are considered as finalists for the opportunity they applied to.