Assistant Chief Information Security Officer (ACISO)

University of California - Los Angeles, CA

Full-time - Senior

Los Angeles, CA

Educational Services

About the position

The Assistant Chief Information Security Officer (ACISO) at UCLA plays a pivotal role in overseeing the Information Security Operations Center (SOC), Security Engineering teams, and the Identity and Access Management (IAM) capability/team. This position is essential for providing strategic direction and management for these units, ensuring their objectives align with the university's overarching security program and broader institutional goals. The ACISO will be responsible for designing and implementing robust security infrastructure to safeguard against various threats and vulnerabilities. This includes overseeing the effective detection, response, and mitigation of security incidents, as well as developing and refining incident response plans. In addition to incident management, the ACISO will manage and enhance UCLA's IAM strategies and processes, ensuring secure and efficient access control across university systems. This role is critical in fortifying the university's information security and advancing the overall security posture of UCLA and its assets. The ACISO will positively impact UCLA's operations and culture by protecting the information and data of university stakeholders in service of the institution's academic mission. This team member will deliver exceptional security service comprehensively and consistently across faculty, staff, and students, executing UCLA's vision while modeling the university's culture and values.

Responsibilities

• Oversee the Information Security Operations Center (SOC) and Security Engineering teams.
• Manage the Identity and Access Management (IAM) capability/team.
• Provide strategic direction and management for security units to align with university goals.
• Design and implement robust security infrastructure to protect against threats and vulnerabilities.
• Oversee detection, response, and mitigation of security incidents.
• Develop and refine incident response plans.
• Manage and enhance IAM strategies and processes for secure access control.
• Ensure compliance with privacy and security regulations and best practices.
• Communicate effectively with technical and non-technical leaders.
• Lead and mentor teams, fostering an inclusive environment.

Requirements

• 7 years of experience in information technology, cybersecurity, computer science, management, higher education, or a related field.
• 6 years of experience in a management or leadership role in a fast-paced, service-oriented environment.
• Demonstrated experience with security incident response and managing incident response teams.
• Experience managing large security operations and engineering teams in a complex environment.
• Significant experience in communication with technical and non-technical leaders.
• Experience in solving complex technical and non-technical problems with budget and resource implications.
• Experience providing inclusive leadership and advancing an inclusive environment.
• Experience leading in a fast-paced environment.
• In-depth knowledge of information security functional areas and managing large security operations.
• Understanding of privacy and security regulations relevant to higher education and medical centers.
• Strong technical skills in security technologies and tools such as SIEM, IDS/IPS, and endpoint protection.
• Knowledge of directory services, SSO technologies, MFA solutions, and identity governance.
• Highly skilled in written and verbal communications.
• Ability to delegate and operate as a point of escalation.
• Experience integrating creative thinking into team operations and inspiring innovation.
• Project management skills with experience delivering multiple complex projects.

Nice-to-haves

• 10+ years of experience in information technology, cybersecurity, computer science, management, higher education, or a related field.
• 8+ years of experience in a management or leadership role in a fast-paced environment.
• Advanced degree in information technology, cybersecurity, computer science, public administration, business administration, or communications.

Benefits

• Comprehensive health insurance coverage starting on day one.
• Retirement savings plan options.
• Tuition reimbursement for further education.
• Professional development opportunities.
• Flexible scheduling options based on operational needs.