Skip to main content

This job has expired

Information Security Officer

Job Details

Posting Details

Position Title

Information Security Officer

Job Description

The Information Security Officer is responsible for the development, implementation and maintenance of the university’s information security program, facilitating information security compliance, and establishing and implementing appropriate policies to manage information security risk.
  • Audit Coordination
  • Corrective Action Plan Development and Execution
  • Governance and Board Strategy Development
  • Security Awareness Program Development
  • Security Plan, Framework, and Policy Development




ESSENTIAL DUTIES :
  • Be responsible for the strategic and tactical leadership of the university’s information security program.
  • Manage university-wide information security governance processes, manages project priorities related to information security, and serves as primary lead for information security incident response.
  • Establish annual and long-range information security and compliance goals, defines information security strategies, metrics, reporting and program services.
  • Lead the development and implementation of effective policies and practices to secure protected and sensitive data and ensure information security and compliance with relevant compliance laws, regulations and related requirements.
  • Lead efforts to internally assess, evaluate, and make recommendations to senior administration regarding the adequacy of the security controls for the university’s information and technology systems.
  • Oversee internal technology audits and works with government audit agencies, and outside consultants as appropriate on required information security assessments and audits.
  • Coordinate and track all information security related audits including scope of audits, units involved, timelines, auditing agencies and outcomes, and provides guidance, evaluation and advocacy on audit responses.
  • Work with university leadership to build a cohesive information security and compliance programs for the university to effectively address state and federal statutory and regulatory requirements.
  • Stay informed of information security issues and regulatory changes affecting higher education at the state and national level, participate in national policy and practice discussions, and communicate to university leadership on a regular basis regarding topics.
  • Engage in professional development to maintain continual growth in professional skills and knowledge essential to the position.
  • Perform other related duties as assigned.


KNOWLEDGE, SKILLS, ABILITIES :
  • Experience in risk, compliance and information security policy development.
  • Knowledge and understanding of higher education, governmental agency or corporate/industry information security, governance, risk and compliance practices and standards.
  • Working knowledge of various information security frameworks.
  • Excellent problem-solving and analytical skills.
  • Ability to educate a non-technical audience about various security measure.



Required Qualifications

  • Bachelor’s Degree in computer technology, information security, cyber security or technology management from a regionally accredited institution of higher learning recognized by the Department of Education.
  • Minimum 3 years’ experience in varied information technologies applicable to computer and networking infrastructure, operating systems, project management, regulatory compliance, risk management, and training.
  • Knowledge of laws and regulations including but not limited to: Family Educational Rights and Privacy Act ( FERPA ), Health Insurance Portability Accountability Act ( HIPAA ), Gramm-Leach-Bliley ( GLB ) Act and Sarbanes-Oxley.
  • Preference may be given to individuals with industry specific certifications including GIAC / SANS (Global Information Assurance Certification/Systems Administration, Network and Security), CISSP (Certified Information Systems Security Professional), CISM /A (Certified Information Security Manager/Auditor), CompTIA Security +, Certified Ethical Hacker, CCSP (Certified Cloud Security Professional)




Preferred Qualifications

  • Master’s degree in computer technology, information security, cyber security or technology management from a regionally accredited institution of higher learning recognized by the Department of Education.
  • The required minimum years of experience of which at least two must be in direct experience in information security in a higher education setting.




Physical Demands

  • Sedentary Work:
    • Exerting up to 10 pounds of force occasionally and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time. Jobs are sedentary if walking and standing are required only occasionally and all other sedentary criteria are met.





FLSA

Exempt

Additional Demands

Hours of Work

8:00 am – 4:30 pm

Posting Number

S258P

Open Date

08/03/2021

Priority Deadline

08/31/2021

Open Until Filled

Yes

Company

Missouri Western State University

At Missouri Western, Griffons Succeed!

Missouri Western State University has a proud tradition of providing a high quality, affordable education to students in the state of Missouri and beyond. We are a four-year, state-supported institution providing a variety of degree programs and offering professional master’s degrees, four-year baccalaureate degrees, two-year associate degrees, pre-professional transfer programs and one-year certificates. In addition, the University offers seminars, conferences and workshops suited to the needs of the community.

Students come from throughout the United States and more than 25 countries. And our alumni live and work around the world. From its humble beginnings in 1915, Missouri Western continues to deepen its impact on the community, region, nation and world.

Get job alerts

Create a job alert and receive personalized job recommendations straight to your inbox.

Create alert