Regulated Data Program Manager - University Information Services – Georgetown University

Located in a historic neighborhood in the nation's capital, Georgetown offers rigorous academic programs, a global perspective, exciting ways to take advantage of Washington, D.C., and a commitment to social justice. Our community is a tight knit group of remarkable individuals interested in intellectual inquiry and making a difference in the world.

Requirements

Regulated Data Program Manager - University Information Services – Georgetown University

Job Overview

The Regulated Data Program Manager is responsible for securing and monitoring all data accessed, transmitted and stored throughout the institution and third party suppliers. They ensure compliance throughout the entire data lifecycle, from inception through disposal, ensuring access to data is managed and maintained following rigorous security, engineering and governance principles.

They work closely with business units and stakeholders to help with data access, ownership and enforcement of policies, rules and safeguards; and collaborate with team members, cybersecurity operations/responders and third parties; and apply their technical proficiency to data protection technologies, including data loss prevention (DLP), cloud access security broker (CASB), data classification, privacy, behavior analytics, encryption and cyber risk principles.

As well, they collaborate with technical and non-technical teams to design, implement and manage data protection processes that reduce risks from noncompliance with regulations, cyber threats and data breaches.

Knowledgeable about cybersecurity frameworks, data storage and identity and access management, and adept at understanding security architecture with internal and hosted services, they provide continual assessment and validation of controls to ensure protection aligns with policies, procedures and risk oversight.

Additionally, the Regulated Data Program Manager works closely with institution stakeholders, contractual and legal points of contact, incident response and cybersecurity operations center staff, and network operations staff.

Candidate  Qualifications

• Capability of working with diverse teams and promoting an enterprise-wide positive security culture.
• Excellent judgment and the ability to make quick decisions when working with complex situations
• Self-starter requiring minimal supervision
• Outstanding written and verbal, business and cybersecurity communication skills
• Highly organized and efficient, with strong project management, multitasking and organizational skills, and ability to prioritize and complete tasks within defined SLAs
• Demonstrated understanding and comprehension of a wide range of network and host cybersecurity solutions.
• Ability to motivate teammates to achieve excellence and willingly shares knowledge.
• Ability to maintain a high degree of integrity, trustworthiness and confidence; represents the organization and its management team with the highest level of professionalism.
• Trustworthy and leads by example for others to follow.
• Track record of successful personnel management.

Position Requirements

• Experience managing a regulated data management program and leading technical teams.
• Excellence in communicating business risk from cybersecurity topics.
• Strong understanding and demonstrated use of best practices following NITTF, NIST and CERT guidance.
• Proficiency with driving measurable improvement in detection and response capabilities at scale.
• Experience managing SIEM, UEBA, IAM, vulnerability management, data loss prevention (DLP), threat intelligence, MITRE ATT&CK framework mapping, security orchestration automation and response (SOAR), and other network and system monitoring tools.
• Proficiency with security analytics and data lifecycle and retention principles.
• Track record of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating well.
• Highly-effective, action-oriented communication up and down the leadership scale
• Analytical and problem-solving mindset.
• Strategic and tactical thinking, along with decision-making skills.
• Understanding of one or more of the following: Data Use Agreements (DUAs), ISO 27001, NIST, PCI, HIPAA/HITECH, GDPR, CIS Benchmarks

Experience

• 3 to 5+ years of cybersecurity or information technology practitioner experience
• 2+ years of related security systems administration with data protection management solutions – preference for some experience with endpoint, network or application security solutions
• Familiarity with administering directory servic