Deputy Chief Information and Security Officer

[C21-100]

Deputy Chief Information and Security Officer

Information Technology

Central Connecticut State University invites applications for a full-time, Deputy Chief Information and Security Officer in the Division of Information Technology. The successful candidate will perform a variety of managerial and supervisory duties assisting the Chief Information Officer in the development of information technology vision, architecture, goals, objectives, and strategic and tactical planning. Most importantly, this position is accountable for managing, developing, and maintaining the University’s cyber security strategy implementation, IT compliance programs, and operational security requirements, information management, data warehouse and classification programs. The University seeks a dynamic, Information Technology professional to champion and lead the University’s IT growth and success.

Supervision:

May manage the work of 10 or more full-time and part time professional and technical support staff in the Information Technology Department.

Position Responsibilities:

Assists the CIO in developing strategies, program goals, procedures, budgets, and the allocation of resources to ensure optimization of technology consistent with the University’s mission, vision, goals, objectives, and business requirements and creates maximum value through technology.

Provides leadership to the Division of Information Technology, staff, faculty, and students on information technology, technology training, best practices, and project management.

Manages strategic and tactical initiatives related to Information Technology (IT) enterprise systems, security, compliance and audit.

Leverages information security and technology resources to implement strategic and IT security planning with IT Technology/Operations, development teams, and users across the organization to ensure a secure infrastructure, applications, and overall data security.

Amends, implements, and monitors a strategic, comprehensive enterprise information security program to ensure the integrity, confidentiality and availability of confidential University information/data.

Facilitates and identifies acceptable levels of risk and establishes roles and responsibilities regarding information classification and protection.

Provides subject matter expertise to management on a broad range of information security standards, best practices, and compliance requirements.

Works with developers and architects to ensure security is appropriately built into the software development cycle and DevOps pipeline and ensures appropriate internal testing of applications prior to deployment. Coordinates the performance of internal and external network and systems vulnerability assessments and penetration tests.

Oversees the operation and management of IT functions and ensures the employment of best practices.

Develops and maintains disaster recovery and emergency response plans and procedures for the timely recovery of critical business and academic functions.

Continually reviews practices and enforces compliance with security and audit standards. Serves as liaison to law enforcement, legal agencies, internal audit and CSCU System officials, regarding the investigation and resolution of security, legal, and audit related issues.

Remains current on IT and personal privacy related state and federal legislation, reporting on proposed changes and potential impact to University operations.

Serves as the CIO’s delegate as assigned and assumes responsibility for IT services and represents the CIO in his/her absence.

Required Qualifications:

• Bachelor's Degree from an accredited institution.
• At least five (5) years of professional experience at the Director level or above.
• Seven (7) years of direct professional experience with data security, system, network, audit, or compliance.
• Implementation or enhancement of security requirements such as, NIST 800-53, Sarbanes-Oxley, ISO certifications, Data Privacy laws, and PCI.
• Excellent interpersonal, communication, leadership, and organizational skills.
  
  

Preferred Qualifications

• Master’s Degree from an accredited institution.
• Industry standard certifications from organizations such as ISC2 or SANS.
• Extensive experience with computer system architecture, computer security administration, and information security strategy creation.

• Demonstrated experience or understanding of higher education enterprise systems (Ellucian, CRM, data warehouses) and how data security principals can be applied to these systems.
• Ability to apply state of the art technologies and computing environments to meet the needs of a complex organization of higher education with a variety of users and complex applications.
• Active in the Information Security Community. This can be demonstrated by contributions to open-source security projects, webcasts, journal articles, presenting or volunteering at security conference, and volunteer work such as providing internet safety courses at local community centers or schools.
• Commitment to serving a diverse community (work or community)
• Ability to work well with all levels of individuals within the University community including students.
• Capable of providing effective leadership, management, and team building.
• Ability to break complex information security concepts into simple terms that can be understood by any audience.
  
  

The University: The largest of Connecticut’s regional comprehensive universities, Central currently enrolls over 10,000 students. A third of its undergraduates are students of color, the largest group being Hispanic. Ninety-six (96%) percent of the students are from Connecticut. For more information about Central Connecticut State University, please visit www.ccsu.edu .

The Community: Located nine miles southwest of Hartford, New Britain is a city of approximately 72,000. Part of the Greater Hartford area of 1.2 million residents, New Britain is centrally located in the state and is within easy reach of much of Connecticut and several metropolitan areas. Nicknamed “the Hardware City” for its rich industrial heritage, it is home to Stanley Black & Decker. Important cultural institutions include the New Britain Museum of American Art and Walnut Hill Park, designed by Fredrick Law Olmstead. New Britain’s population is characterized by a high degree of racial and ethnic diversity. Currently, the U.S. Census Bureau estimates 70% of the population as White, 13% as Black or African American, 3% as Asian, and 0.2% as American Indian or Alaska Native. Currently 4.6% of New Britain’s population identify themselves in more than one racial category and 43% of New Britain’s population identify themselves as Hispanic or Latino. Fifty percent (50%) speak a language other than English in the home and 19% were born internationally. Significant portions of its population come from Puerto Rico and Poland or consider themselves to be from the African-American, Italian, or Irish ethnic backgrounds. In addition to all that greater Hartford provides, New Britain is 40 minutes from Springfield, Massachusetts two hours from Boston, and two hours from New York City. It is also part of the Hartford-Springfield “Knowledge Corridor” and, therefore, within easy driving distance of a host of private and public institutions of higher education and many cultural opportunities.

Application and Appointment: For full consideration, applications must be received by February 18, 2022.

To begin the application process, click on the Apply button and electronically submit the following documents:

• Letter of interest addressing qualifications for the position
• Current resume

• Names of three professional references including their address, email address, and telephone numbers.

The Deputy Chief Information and Security Officer is compensated at the Executive 1 salary level in accordance with the CSCU Human Resources Policies for Management and Confidential Professional Personnel https://www.ct.edu/files/policies/4.8%20HR%20Policies%20for%20Mgmt%20Conf%20Employees.pdf

The State of Connecticut and Central Connecticut State University is proud to offer its employees competitive wages and a wide range of fringe benefits including voluntary and supplemental benefits.

Fringe benefits include personal, vacation and sick leave, paid holidays, medical, dental, and prescription plans, group life insurance, a choice of retirement plans, retirement health care, tuition waiver for employee and eligible dependents at any of the Connecticut State Universities (Central, Eastern, Southern or Western) as well as an array of voluntary and supplemental benefits such as Deferred Retirement Compensation plans, Dependent Care Assistance and Medical Flexible spending accounts, long term and short term disability plans.

For more detailed information, please visit CCSU Human Resources

Incomplete or late applications will not be considered. Emailed and mailed applications will not be accepted. Please redact any personally identifiable information (i.e., Social Security number, date of birth, marital status, country of origin) from any documents submitted. Please ensure your Social Security Number is not listed on any documents submitted.

For more information, contact Thomas L. King Search Committee Chair, at 860-832-0113 or kingtl@ccsu.edu

As an affirmative action employer, Central Connecticut State University actively seeks and encourages applications from women, minorities, persons with disabilities, and individuals with protected veteran status. The University provides reasonable accommodations to qualified individuals with disabilities upon request.