|
Managing Director & Chief Information Security Officer
TTUS Information Technology Position Description Plans and directs the overall operation of a major department (with institutional oversight) and provides leadership for staff members. Meets ORP eligibility requirements. Under executive direction, performs highly varied administrative duties involving the use of independent judgment and professional skills. Responsible for all employees assigned to area. About the University Established in 1996, the Texas Tech University System is one of the top public university systems in the nation, consisting of five universities - Texas Tech University, Texas Tech University Health Sciences Center, Angelo State University, Texas Tech University Health Sciences Center El Paso and Midwestern State University.
Headquartered in Lubbock, Texas, the TTU System is a more than $3 billion enterprise focused on advancing higher education, health care, research and outreach with approximately 21,000 employees and 63,000 students, more than 400,000 alumni, a statewide economic impact of $16.4 billion and an endowment valued at $1.7 billion. In its short history, the TTU System has grown tremendously and is nationally acclaimed, operating at 24 academic locations in 20 cities (18 in Texas, 2 international).
In addition, the TTU System is one of only nine in the nation to offer programs for undergraduate, medical, law, nursing, pharmacy, dental and veterinary education, among other academic areas. About the Department and/or College Texas Tech University System has adopted a collaborative governance model that aligns IT with the overall mission and goals of the institutions. The Office of the TTU System Chief Information Officer works jointly with the CIOs from Texas Tech University, Texas Tech University Health Sciences Center, Texas Tech University Health Sciences Center El Paso, Angelo State University, and Midwestern State University and chairs the CIO Council. The CIOs work collaboratively through the CIO Council to coordinate IT direction, strategic plans, risk assessments and policies for the Texas Tech entities as well as IT related compliance and reporting for the state of Texas. The TTU System Information Technology Division works with the Texas Tech community to identify and provide solutions needed to service our students, faculty and staff. In collaboration with our constituents and the private sector, the Information Technology Division has deployed a robust portfolio of IT solutions and services that support the academic, research, and service mission of the institutions.
The IT Division understands that emerging technologies, security threats, and a growing demand for information technology services creates many opportunities and challenges. As we look to the future, we are eager to continue our internal and external partnerships to ensure our systems and services provide added value to meet the needs of the Texas Tech University System community. Major/Essential Functions
- Researching and staying abreast of the latest trends in cyber security which may impact the security and safety of information resources and data developed by Texas Tech University Systems institutions.
- In cooperation with leadership at Texas Tech University System and its affiliated institutions, develop applicable system-wide regulations and policies to reflect best practices in cyber security and compliance requirements with applicable federal and state laws.
- Coordinate with appropriate peer groups, government sponsored entities, and executive management to review, propose, and implement technology-based solutions to improve cyber security.
- Develop standards for designing, testing, and implementing secure operating systems, networks, and databases.
- Perform password auditing, network based and Web application-based vulnerability scanning, virus management, and intrusion detection.
- Conducting risk audits and assessments, providing recommendations for application design and acceptable levels of cyber security.
- Ensure monitoring and analyzing of system access logs and related security event monitoring tool sets for cyber security purposes.
- Provide security related insight in planning for security backup and system disaster recovery.
- Ensure that required cyber security awareness programs are developed and in place and that applicable users are in compliance with state and federal compliance requirements.
- Developing and producing regular reporting and advice to executive leadership regarding the current state of cyber security and risk posture of information resources operating within the Texas Tech University System as well as appropriate required related regulatory reporting to various agencies regarding cyber security.
- Maintaining the security/integrity of the infrastructure, which is a requirement to be hired for, and to continue to the employed in, the position.
- Establishes and implements strategies that have short to mid-term (1-3 years) impact on business results in alignment with parent/corporate organization objectives.
- May lead multiple teams of directors/senior managers, and managers either through projects or assigned teams.
- Develops short to mid-term (1-3 years) plans for optimizing the organization, function, or sub-function and the talent required to executive strategies in job area.
REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES:
- Knowledge and understanding of relevant legal and regulatory requirements, such as: Health Insurance Portability and Accountability Act (HIPAA), Family Educational Rights and Privacy Act (FERPA), and Payment Card Industry/Data Security Standard.
- Knowledge of common information security management frameworks, such as ISO/IEC 27001, ITIL, COBIT as well as those from NIST, including 800-53 and Cybersecurity Framework.
- Sound knowledge of business management and a working knowledge of cybersecurity risk management and cybersecurity technologies.
- Up-to-date knowledge of methodologies and trends in both business and IT.
Required Qualifications Bachelor's degree required; master's preferred. Seven years progressively responsible management experience required. Education beyond bachelor's level may substitute for required experience on a year-for-year basis. Preferred Qualifications
- 10+ years progressive experience in various information security roles such as Security Analyst, Network Administrator, or Incident Responder.
- Demonstrable experience in areas of vulnerability management, risk assessment, and incident response
- Any combination of relevant cyber security certifications:
- Certified Information Systems Security Professional (CISSP);
- Certified Chief Information Security Officer (CCISO); and/or
- Certified Information Security Manager (CISM).
Safety Information Adherence to robust safety practices and compliance with all applicable health and safety regulations are responsibilities of all TTU employees. Does this position work in a research laboratory? No Required Attachments Professional/Personal References, Resume / CV Optional Attachments Other Documents Supporting Qualifications Pay Statement Compensation is commensurate upon the qualifications of the individual selected and budgetary guidelines of the hiring department, as well as the institutional pay plan. For additional information, please reference the institutional pay plan by visiting www.depts.ttu.edu/hr/payplan. Schedule Details Monday - Friday 8 AM to 5 PM Job Group Mid-level Officer and Manager EEO Statement All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, age, disability, genetic information or status as a protected veteran. |
Texas Tech University
Dec 17, 2024