Chief Information Security Officer (CISO)
Security
Houghton, MI
OVERVIEW OF THE POSITION: TeamBradley is partnering with their client to connect with an outstanding Chief Information Security Officer (CISO). This person will be responsible for developing and delivering a security strategy. This environment consists of 1,400 employees, 36,000 network devices, and 800 servers. This candidate will be the primary security architect for technology. This position is Hybrid and you must be local to the area or willing to move.
RESPONSIBILITIES:
- Supervisory responsibilities for a staff of 2 people.
- Direct budgetary responsibilities in the $650k – $700k range, within a $12M total budget for the IT area.
- Lead incident response teams and forensic investigations and monitor resources for attacks.
- Collaborate with staff to educate and train them on security risks and response techniques.
- Provide reports to keep executive management and external agencies informed.
- Work with the Office of Risk Management and General Counsel as needed.
- Develop, implement, and administer technical security standards, a suite of security services, and security risk.
- Perform vulnerability assessments and evaluate the risk.
- Lead the development and implementation of effective policies and practices to secure data and ensure security and compliance.
- Stay up to date on security incidents and act as the primary contact.
- Act as liaison with law enforcement and government agencies.
- Provide direction and guidance in evaluating information security risks and monitor compliance with security standards and policies.
- Prepare short and long-term strategic and operating plans.
- Advise operating units at all levels on security issues, best practices, and vulnerabilities.
- Develop and enforce security protocols.
- Ensure compliance with company, state, and federal regulations.
- Stay current on all emerging technology and improve best practices among employees.
EDUCATION AND EXPERTISE:
- Master’s degree preferred with 5+ years in Information Technology/Information Security.
- Must be able to obtain U.S. Department of Defense Security Clearance or already have it.
- Strong preference for Security certification such as CISSP or GIAC.
- Must be a US Citizen (no dual citizenship).
- Required professional experience working with network technologies and protocols, firewalls, intrusion detection, and prevention systems.
- Required professional experience and working knowledge of regulator rules, frameworks, and controls. Including HIPAA, HITECH, GLBA, PCI-DSS, and RFRs.
- Required previous experience designing and implementing controls related to NIST-800 series, DFARS, HIPAA, PCI-DSS, or similar.
- Preference for previous experience in a higher education leadership role.
Our client is an Equal Opportunity Educational Institution/Equal Opportunity Employer that provides equal opportunity for all, including protected veterans and individuals with disabilities.
To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Offers of employment are contingent upon and not considered finalized until the required background check has been performed and the results received and assessed.
WHEN RESPONDING TO THIS OPPORTUNITY: Resumes without the required technical skills and experience will not be considered. Although a strong desire for a certain type of position is a credit to your goal, experience is necessary.
Chief Information Security Officer (CISO), 23-12016