Pay Grade/Pay Range: Minimum: $101,900 - Midpoint: $142,700 (Salaried E15)
Department/Organization: 200721 - Enterprise Technology
Normal Work Schedule: Monday - Friday 8:00am to 5:00pm
Note to Applicants: Position is eligible for hybrid work subject to University policy .
Job Summary: The Director of Information Security Operations leads technical activities and operational efforts for the University's information security program. Leads information security detection, response, investigation, and remediation activities. Oversees operational security programs such as data loss prevention, anti-malware, and web security. Plans and directs operational information security strategies. Directly supervises the security operations team. Provides high-level oversight to the Security Operations Center. Advises leadership on information security matters. Monitors industry trends to develop and implement best practices for information security operations. Serves as the incident commander for low and medium severity incidents.
Additional Department Summary: Provides vision and direction of the information security operations program. Manages and matures information security operations practices for the University. Oversees the information security awareness program for the University. Manages and trains personnel and provides technical leadership, direction, and expertise.
Required Minimum Qualifications: Bachelor's degree and eight (8) years of information security experience; OR master's degree and six (6) years of information security experience. Must have CISSP certification and GIAC Certified Incident Handler (GCIH) certification.
Skills and Knowledge: Deep understanding of information security frameworks. Aptitude for solving problems. Self-motivated and resourceful. Ability to manage highly complex assignments and systems. Ability to effectively communicate verbally and in writing with customers and leadership. Ability to work with customer groups and users of varying degrees of technical ability and understanding. Ability to manage, lead, and support a team of technical staff who support a wide range of processes. Ability to understand team members' strengths and weaknesses and leverage all available resources to work through incidents. Effective time management skills. Ability to work on and manage multiple projects simultaneously.
Preferred Qualifications: Familiarity with higher education and UA-specific business processes. Extensive experience working with customers and participating in information security incident response activities.
Background Investigation Statement: Prior to hiring, the final candidate(s) must successfully pass a pre-employment background investigation and information obtained from social media and other internet sources. A prior conviction reported as a result of the background investigation DOES NOT automatically disqualify a candidate from consideration for this position. A candidate with a prior conviction or negative behavioral red flags will receive an individualized review of the prior conviction or negative behavioral red flags before a hiring decision is made.