Senior Director, Information Security

Senior Director, Information Security Operations

Department of Information Technology

Regular, Exempt, Full-time, Pay grade 4.5

Location: Adelphi, Maryland

The Senior Director of Information Security Operations is responsible for developing, implementing and monitoring a strategic, comprehensive enterprise cybersecurity and IT risk management operational too portfolio and program. The Senior Director of Information Security Operations provides the vision and leadership necessary to manage the day-to-day risk to the organization and will ensure business alignment, effective governance oversite, system and product availability, integrity and confidentiality. The Senior Director of Information Security Operations is an integral part of the IT Operations team supporting our customers.  

RESPONSIBILITIES: 

• Conduct a thorough assessment of the company’s operational security needs, priorities and opportunities in order to visualize, create, and execute on an information security program  

• Design and develop an information security operational roadmap to align and scale with company growth  

• Lead security assessment and testing processes, including but not limited to penetration testing, vulnerability management, and secure software development at a global level  

• Plan for and manage incident response plans while minimizing effect on the business  

• Develop and extend security tooling and automation efforts across the organization  

• Proactively identify security issues and potential threats and continuously build processes and design systems to watch for and protect against them  

• Lead compliance activities supporting external audits, regulatory compliance projects, and overall information security reviews  

• Educate the organization about these threats and implement threat protection measures.  

• Manage implementation and monitoring of the enterprise Cybersecurity Awareness Program reporting to compliance to the VP of Information Technology and Security Operations, as well as UMGC executive sponsor and senior management. 

• Serve as cross-functional leader and provide direction to key, accountable stakeholders in a matrix environment with dotted-line reports embedded within the business  

• Serve as the information security expert in front of the Executive team  

• Advocate for and manage the portfolio of secure application and infrastructure best practices, ensuring a security presence at all stages and of the software development lifecycle tending to a zero-trust strategy 

• Manage relationships with external information security technology vendors and specialized information security professional services firms  

• Attract, develop, and retain a highly talented team as the information security program grows 

• Plan, develop, document, and implement an enterprise Disaster Recovery plan consistent the UMGC hybrid IT Cloud Infrastructure 

• Collaborate with appropriate UMGC business stakeholders to facilitate a Business Continuity Plan consistent with UMGC’s application stack (cloud SaaS and OnPrem) and business process make up 

MINIMUM QUALIFICATIONS, KNOWLEDGE, SKILLS, AND ABILITIES: 

Formal Education & Certification:

• Bachelor’s degree 

Highly desirable to hold one