Title: Director - IT Security

Employee Classification: Other Professionals

Institution: Southwest Tennessee Community College

Department: Information Systems

Campus Location: STCC - Multiple Campus Locations

Job Summary

This is a full-time permanent, fiscal year position in the Division of Administrative Services reporting to the Deputy Chief Information Officer. The Director of IT Security provides strategic leadership and oversight of the institution's cybersecurity posture. This critical role ensures that the College's information systems are protected from internal and external threats by developing, implementing, and maintaining security protocols and training programs. The Director will guide security-related decisions, proactively manage risk, and promote a culture of cybersecurity awareness across the organization.

Job Duties

• Lead the College's information security program, including development and delivery of cybersecurity awareness training and policy education.
• Collaborate with departments including Internal Audit and Finance/Controller to identify risks and implement IT risk mitigation strategies.
• Research and stay current on emerging cybersecurity threats, tools, and trends.
• Monitor institutional networks and systems for security breaches; respond to and investigate incidents as needed.
• Provide leadership, guidance, and supervision to security, identity management, and compliance staff.
• Oversee the College's incident response plan and ensure policy compliance; lead efforts to remediate violations.
• Direct the implementation of security tools such as firewalls, encryption, and monitoring software.
• Recommend and implement IT security standards and best practices.
• Assist technical staff and end users with the deployment and understanding of security tools and practices.
• Coordinate and conduct periodic IT security audits.
• Maintain up-to-date knowledge of cybersecurity through professional development and industry resources.
• Perform other duties as assigned.

Minimum Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Audit or a related field.
• Three (3) to five (5) years of relevant IT experience with a focus on cybersecurity.
• CISSP certification (or equivalent experience) is a plus.
• Project Management certification (e.g., PMP) is a plus.

Preferred Qualifications

• Experience in higher education or similarly complex environments.
• Familiarity with security compliance frameworks (e.g., NIST, FERPA, HIPAA).
• Leadership experience in cross-functional IT teams or cybersecurity projects.

Knowledge, Skills, and Abilities

• Demonstrated knowledge of network security technologies, protocols, and practices.
• Proven ability to communicate effectively with both technical and non-technical stakeholders.
• Strong interpersonal, verbal, and written communication skills.
• Excellent problem-solving, analytical, time management, and organizational skills.

The intent of this job description is to provide a representation of the types of duties and responsibilities that will be required of positions given this title and shall not be construed as a declaration of the total specific duties and responsibilities of any particular position. Employees may be directed to perform job-related tasks other than those specifically presented in this description.

Candidates who are called for an interview must notify Human Resources in writing at least five (5) days in advance of any reasonable accommodation needed prior to the date of the interview.

First consideration will be given to current Southwest Tennessee Community College employees who meet the minimum qualifications for the position.

In order to be considered for the position, the following items must be uploaded:

• Resume
• Cover letter
• Unofficial Transcripts

A summary of our benefits can be found below:

https://www.southwest.tn.edu/hr/benefits-overview.php

Incomplete applications will not be considered.