Chief Information Security Officer

IMPORTANT APPLICATION INSTRUCTIONS:

• Upload Resume or Curriculum Vitae for automatic population of information to the application.
• The contact information, work experience, and education listed on your Resume/CV will be parsed and input into your Montclair application.
• Review information and double-check all fields containing information that the system parsed – the software is intelligent, but you need to verify that the data is accurate.
• In the “My Experience” section, you will find a Resume/CV upload option where you can submit your cover letter and all other supporting documents.

Note: If you have an expansive CV, we recommend that you apply manually and only include the positions you have held in the last ten (10) years. You will then be able to attach your Resume/CV, as well as all other supporting documentation in the "My Experience" section of your application.

Job Description

SUMMARY:

Reporting to the Deputy CIO of Information Technology, the Chief Information Security Officer (CISO) is a member of the Information Technology (IT) leadership team and works closely with senior administration, academic leaders, and the campus community. The CISO is the lead advocate for the institution's information and cyber security needs and is responsible for the development and oversight of a comprehensive information security strategy intended to protect information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction and to provide confidentiality, integrity, and availability. 

As a member of the IT leadership team, the CISO leads the development, implementation, and oversight of an information and cyber security program to protect campus-wide resources, facilitates information security governance, advises senior leadership on security matters and resource investments, and writes appropriate policies to manage information security risk. The CISO is responsible for recommending and coordinating the planning, implementation, enforcement, and troubleshooting activities that ensure the security and integrity of the University’s overall information systems and data assets. The complexity of this position requires a leadership approach that is engaging, imaginative, and collaborative, with a sophisticated ability to work with University systems and campus leaders to optimize the information security posture of the University.

This position directly manages a team of information and cybersecurity staff and also has authority to create ad hoc working groups among other central and distributed IT staff as needed to ensure that the University's overall computing and network policies, procedures, and infrastructure design adhere to information security best practice principles.  The CISO is a visible/communicative leader on campus and off-campus by representing Montclair to the global higher education community. 

PRINCIPAL DUTIES AND RESPONSIBILITIES:

University and Program Leadership:

• Provide guidance and counsel to the CIO and key members of the University leadership team regarding information security and privacy issues, risks, mitigation strategies, and information security governance.

• Develop a comprehensive information security program with annual and long-range security and compliance goals, metrics, reporting mechanisms, and program services.

• Develop and lead outreach, communication, and user education efforts to promote campus-wide information and cybersecurity awareness.

• Collaborate with IT leadership on incorporating information security throughout the technology life cycle, risk management, and audit compliance to provide adequate protection for campus hosted information resources.

• Build positive relationships and foster goodwill towards efforts to improve overall security posture.

• Review hardware, software, and services being considered for purchase or implementation by IT or other campus departments to assess potential security risks and ensure proper information security features are incorporated to address university requirements.

• Maintain integrity and appropriate confidentiality of information security related matters.

• Provide supervision for team resources, as well as budget development and management as needed.

Policy, Compliance and Audit:

• Develop, implement and oversee policies, standards and processes.

• Serve as the University’s primary point of contact in all audit, compliance, insurance, or legal matters related to information security.

• Keep abreast of