Manager, Information Security
University of Maryland Global CampusAbout the role
Summary:
The Manager of Information Security is responsible for developing, implementing and monitoring a strategic, comprehensive enterprise cyber security program. The Manager provides the vision and leadership necessary to manage the risk to the organization and will ensure business alignment, effective governance, system and product availability, integrity and confidentiality. The Manager is an integral part of the IT Operations team supporting our customers.
Duties and Responsibilities:
Conduct a thorough assessment of the company’s security needs, priorities and opportunities in order to visualize, create, and execute on an information security program
Design and develop an information security roadmap to align and scale with company growth
Lead security assessment and testing processes, including but not limited to penetration testing, vulnerability management, and secure software development at a global level
Plan for and manage incident response plans while minimizing effect on the business
Develop and extend security tooling and automation efforts across the organization
Proactively identify security issues and potential threats and continuously build processes and design systems to watch for and protect against them
Lead compliance activities including external audits, regulatory compliance projects, and overall information security reviews
Educate the organization about these threats and implement threat protection measures
Serve as cross-functional leader and provide direction to key, accountable stakeholders in a matrix environment with dotted-line reports imbedded within the business
Serve as the information security expert in front of the Executive team
Advocate for secure application and infrastructure best practices, ensuring a security presence at all stages of the software development lifecycle
Manage relationships with external information security technology vendors and specialized information security professional services firms
Attract, develop, and retain a highly talented team as the information security program grows
Skills:
Experience developing, maintaining, and implementing an Information Security Program (ISP) including policy and strategy development, preferably in higher education
Experience addressing information security related issues involving identity and access management, intrusion detection, forensics, incident management, risk management and/or auditing
Experience evaluating and providing guidance on information security software and hardware acquisitions, IT services, cloud-based solutions, and mobility
Knowledge of security assessment and testing tools
Experience with developing and managing an information security awareness and training program.
Experience with information security and compliance related issues (e.g. FERPA, HIPAA, PCI-DSS, GLBA, copyright and software piracy
Experience in managing and negotiating vendor contracts and agreements
Ability to communicate effectively in writing and oral presentations
Strong business acumen and a collaborative, influential partner able to educate, build relationships, and foster adoption of sound security practices (commitme
Apply for this role
Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.
Apply Now →Generate Application KitFree account required — sign up in 30s