Deputy Chief Information Security Officer

Deputy Chief Information Security Officer (Deputy CISO)

University of Southern California – USC Office of Cybersecurity

The University of Southern California is seeking a seasoned cybersecurity leader to serve as the Deputy Chief Information Security Officer (Deputy CISO) within the USC Office of Cybersecurity. Reporting to the Chief Information Security Officer (CISO), the Deputy CISO provides enterprise leadership for cybersecurity governance and cross-functional oversight of critical cybersecurity domains across the university.

This role is responsible for advancing USC’s cybersecurity strategy through governance, risk management, and operational coordination across the institution’s diverse academic, research, and administrative environments. The Deputy CISO will lead cybersecurity governance functions and collaborate closely with Information Security Officers and university leadership to strengthen cyber risk management and expand cybersecurity capabilities across departments, schools, and units.

The Deputy CISO serves as the primary delegate to the CISO, assuming full decision-making authority in their absence and acting as a strategic advisor and potential successor to ensure continuity of cybersecurity leadership and execution of enterprise security objectives.

Applications will be accepted until the position is filled. For full consideration, please submit materials by the priority deadline of April 1, 2026.

Key Responsibilities include the following:

• Lead and oversee the Cyber Governance function, including cybersecurity training and awareness, cyber performance management, and policy management programs.

• Provide cross-functional oversight of key cybersecurity domains, including Identity & Access Management (IAM), Cybersecurity Architecture & Engineering, and Cyber Defense.

• Partner with Information Security Officers and stakeholders across departments, schools, and research units to coordinate cybersecurity initiatives and risk management activities across the university.

• Support and help drive strategic cybersecurity initiatives, ensuring alignment with the university’s mission, research priorities, and operational needs.

• Oversee the development, implementation, and enforcement of cybersecurity policies, standards, and best practices across the enterprise.

• Strengthen and expand cybersecurity capabilities, tools, and processes that enhance protection of university systems, data, and research assets.

• Lead and mentor cybersecurity teams, fostering collaboration, professional growth, and operational excellence.

• Manage resources effectively, including oversight of budgets, staffing, and prioritization of cybersecurity initiatives.

• Ensure alignment with leading security frameworks, regulatory requirements, and industry standards (e.g., NIST, ISO 27001, FERPA, HIPAA).

• Serve as a trusted strategic advisor to the CISO and university leadership on cybersecurity risk, governance, and emerging threats.

• Assume full operational leadership of cybersecurity functions in the absence of the CISO, ensuring continuity of leadership and enterprise security operations.

Performing other related responsibilities as requested and when necessary. The university reserves the right to add or change duties at any time.

Minimum Qualifications:

• Bachelor’s degree within Information Science, Computer Information Systems, Cyber Security or related field(s)

• 10 years’ experience in governance, risk and compliance, team management and security frameworks

• Relevant cyber certification such as CISSP, GIAC, CISM.

• Demonstrated ability to align security initiatives with institutional objectives.

• Strong ability to coordinate cybersecurity efforts across diverse departments, schools, and research units.

• Experience in developing, implementing, and enforcing cybersecurity policies, standards, and best practices in a complex organizational environment.

• Comprehensive understanding of cybersecurity frameworks (e.g., NIST, ISO 27001), data protection regulations (e.g., FERPA, HIPAA), and risk mitigation strategies.

• Demonstrated ability to lead, mentor, and manage cybersecurity professionals, oversee budgets, and allocate resources effectively.

Preferred Qualifications:

• MBA or master’s degree in computer science or related field(s)

• 15 years’ experience in governance, risk and compliance, team management and security frameworks

• In-depth knowledge of industry standards, regulations, and new industry developments/trends.

• Ability to gai