Chief Information Security Officer and Architect

$18,000 - $148,803/Yr

Metropolitan State University - Saint Cloud, MN

Part-time,Full-time - Senior

Saint Cloud, MN

Educational Services

About the position

The Chief Information Security Officer and Architect (CISO) at St. Cloud State University is responsible for providing vision and leadership in developing and supporting IT security initiatives across the organization. This role involves directing the planning and implementation of enterprise IT systems, ensuring robust defenses against security breaches, and overseeing the administration of security policies and standards. The CISO will also audit existing systems, manage security requirements, and lead a team to enhance IT security and business continuity in compliance with various regulations and standards.

Responsibilities

• Direct the planning and implementation of enterprise IT systems and security initiatives.
• Audit existing systems and direct the administration of security policies and standards.
• Serve as the primary contact for all IT security issues on campus.
• Reduce on-prem footprint and surface attack vectors, leveraging SaaS alternatives.
• Automate infrastructure change management and invest in team development.
• Align infrastructure to enable seamless business experiences while reducing risks.
• Oversee the implementation of security and business continuity requirements as per institutional policies and regulations.

Requirements

• Bachelor's degree in computer science, information technology, engineering, business administration, or related field, or equivalent experience.
• Current CISSP certification or ability to obtain it within the probationary period.
• Five years of related IT experience in data security, including database design, secure networking, and application development.
• Three years of experience leading and managing large-scale technology projects.
• Three years of experience supervising or leading data security or architecture personnel.
• Strong problem-solving abilities and advanced knowledge of business theory and processes.
• Experience in planning and developing IT security technologies and standards.
• Knowledge of implementing information security regulations such as PCI, HIPAA, and FERPA.

Nice-to-haves

• Professional experience in higher education.
• Knowledge of enterprise risk management (ERM) frameworks.
• Cloud knowledge and implementation, specifically PaaS and SaaS.
• Expertise in data security contract terms and conditions.
• Multiple current industry certifications in security (CISSP, CISM, CISA, CRISC, CHPS).
• Knowledge of information security standards and regulations.

Benefits

• 11 paid holidays
• Vacation time
• Sick time
• Six weeks of paid parental leave
• Low-cost medical and dental insurance with low deductibles
• Pension plan
• 457(b) and 403(b) retirement plans
• Pre-tax medical and dental expense accounts
• Employer-paid life insurance
• Short and long-term disability
• Professional development opportunities
• Tuition waiver program for employees and their dependents