Chief Information Security Officer and Architect

St. Cloud State University - Saint Cloud, MN

Full-time - Senior

Saint Cloud, MN

Educational Services

About the position

The Systems Supervisor (Chief Information Security Officer, CISO) is responsible for providing vision and leadership for IT security initiatives across the organization. This role involves directing the planning and implementation of enterprise IT systems, ensuring defenses against security breaches, and auditing existing systems. The CISO will also oversee the administration of security policies and standards, while being the primary contact for all IT security issues on campus. The position aims to modernize IT infrastructure, reduce on-premises footprint, and enhance security through automation and innovative practices.

Responsibilities

• Direct the planning and implementation of enterprise IT systems and security initiatives.
• Audit existing systems and direct the administration of security policies and standards.
• Serve as the primary contact for all IT security issues on campus.
• Reduce on-prem footprint and surface attach, leveraging SaaS alternatives.
• Automate infrastructure change management and invest in team development.
• Align infrastructure to enable seamless business experiences while reducing risks.
• Oversee and monitor security and business continuity requirements as per institutional policies and regulations.

Requirements

• Bachelor's degree in computer science, information technology, engineering, business administration, or related field, or equivalent experience.
• Current CISSP certification or ability to obtain within probationary period.
• Five years of related IT experience in data security, including database design, secure networking, application development, or system administration.
• Three years of experience leading and managing large-scale technology projects.
• Three years of experience supervising or leading data security or architecture personnel.
• Strong problem-solving abilities and advanced analytical skills.
• Considerable knowledge of business theory, processes, management, and budgeting.
• Experience in planning and developing IT security technologies and standards.
• Substantial exposure to data processing, hardware platforms, and cloud platforms.
• Experience with implementing information security regulations such as PCI, HIPAA, and FERPA.

Nice-to-haves

• Professional experience in higher education.
• Knowledge of enterprise risk management (ERM) frameworks.
• Cloud knowledge and implementation, specifically PaaS and SaaS.
• Expertise in data security contract terms and conditions.
• Multiple current industry certifications in security (CISSP, CISM, CISA, CRISC, CHPS).
• Knowledge of information security standards and regulations related to data confidentiality.

Benefits

• Health insurance
• Dental insurance
• 401k retirement plan
• Flexible scheduling options
• Professional development opportunities