Chief Information Security Officer

Montana State University - Bozeman, MT

Full-time - Executive

Bozeman, MT

Educational Services

About the position

The Chief Information Security Officer (CISO) at Montana State University (MSU) is responsible for leading and managing all information security functions across the university's four-campus enterprise. Reporting directly to the Vice President & CIO, the CISO will develop and implement security policies, manage incident responses, and ensure compliance with relevant laws and standards. This role also involves overseeing the Information Security Group, managing the security budget, and promoting security awareness across the institution.

Responsibilities

• Provide leadership and management for all information security functions across MSU's 4-campus enterprise.
• Develop long-term vision, strategy, and roadmap for IT risk, security, and compliance.
• Lead the development and implementation of information security policies, practices, procedures, and standards.
• Ensure compliance with applicable laws, campus policies, and industry privacy standards.
• Oversee information security compliance reviews and investigations.
• Establish and operate the Montana State University Security Operations Center.
• Manage the Information Security Group, including monitoring and managing system and network security issues.
• Direct vulnerability management and operational management of the University's Data Loss Prevention program.
• Develop and implement security training for employees and contractors.
• Provide updates and presentations to MSU leadership as needed.

Requirements

• Bachelor's degree in information security, Computer Science, Information Management Systems, or equivalent experience.
• Progressive experience in security and privacy best practices in enterprise environments, including incident response and security management.
• Advanced knowledge of vulnerability management practices and experience with ERP systems.
• Experience in personnel, project, and budget management.
• Familiarity with enterprise security tools such as data loss prevention and intrusion detection systems.

Nice-to-haves

• Master's degree in information security, Computer Science, or Information Management Systems.
• Certified Information Systems Security Professional (CISSP) or Certified Information Systems Auditor (CISA).
• Advanced network administration experience, including knowledge of network protocols and firewalls.
• Experience with DLP, IDPS, NDR, and endpoint management tools in a higher education environment.

Benefits

• Salary commensurate with experience, education, and qualifications.
• Eligible for benefits as a full-time employee.