Missouri Southern State University Hiring for Chief Information Security Officer at Joplin, MO Full Time

General Statement of Job

The Chief Information Security Officer is the lead position for Information Technology security at Missouri Southern State University. The CISO is responsible for all security functions related to IT, including ERP systems, network availability and the provision and management of educational technologies. The CISO assists the CIO with managing all budget and personnel duties for IT. Reporting to the CIO, the CISO represents IT to all campus entities related to security topics and concerns.

Specific Duties and Responsibilities

Essential Duties:

• Develops and manages information security and risk management awareness and training programs.
• Develops and implements policies for encryption of data transmissions and the erection of firewalls to conceal information as it is being transmitted.
• Oversees the implementation of computer system security plans with stakeholders and outside vendors.
• Directs the ongoing development and implementation of university information and cybersecurity plans, policies, standards, guidelines, and procedures to ensure information security capabilities cover current threat capabilities.
• Directs the university risk management program through planning, developing, coordinating, and implementing information technology disaster recovery and business continuity planning.
• Directs the design and deployment of security infrastructure.
• Assists CIO with providing strategic and tactical planning, implementation, and development for the IT department.
• Reviews technical risk assessments and new and existing applications and systems, including data center physical security and environment.
• Reviews results of special investigations, internal audits, and tabletop exercises to provide direction and guidance.
• Reviews guidelines, procedures, rules, and regulations; and monitors compliance.
• Manages custody and security of evidence-containing media.
• Works with outside agencies, including law enforcement and other authorities.
• Supervises the work of others.
• Performs related work as assigned.

Education, Experience, and Licenses

A bachelor’s degree is required. Master’s degree and/or certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Systems Manager (CISM), or Certified in Risk and Information Systems Control (CRISC) preferred.

Valid Driver’s License and the ability to meet insurance requirements for driving university provided vehicles.

Knowledge, Skills, and Abilities

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Knowledge of local, state, and federal laws and regulations relevant to information security, privacy, and computer crime; the limitations and capabilities of computer systems; technology across all network layers and computer platforms; and operational support of networks, operating systems, Internet technologies, databases, and security applications.
• Ability to direct and organize program activities; to identify problems, evaluate alternatives, and implement effective solutions; to develop and evaluate policies and procedures; to prepare reports; to resolve advanced security issues in diverse environments; and to communicate effectively.
• Ability to read, analyze, and interpret common scientific and technical journals, financial reports, and legal documents.
• Ability to respond to common inquiries or complaints from customers, regulatory agencies, or members of the business community or law enforcement.
• Ability to effectively present information to top management, public groups, and/or boards of directors.
• Ability to define problems, collect data, establish facts, and draw valid conclusions.
• Ability to interpret an extensive variety of technical instructions in mathematical or diagram form and deal with several abstract and concrete variables.
• Requires the ability to be accountable for inventory/property management.
• Requires the ability to make recommendations that impact the budget.
• Requires the ability to use small office equipment, including copy machines or multi-line telephone systems.
• Requires the ability to use computers for data entry.
• Requires the ability to use computers for word processing and/or accounting purposes.
• Requires the ability to use or repair network diagnostic equipment.
• Requires the ability to repair, develop, or install computer hardware or network systems.
• Requires strong knowledge of network standards and protocols
• Requires strong knowledge of security frameworks and methodologies
• Requires the ability to supervise employees developing, installing, or repairing technology systems.
• Requires leadership experience and ability to delegate and manage a team.

Physical Demands/Work Environment

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee is frequently required to sit; use hands to finger, handle, or feel (including the use of a computer keyboard); and talk or hear (including the use of a telephone). The employee is occasionally required to stand; walk; reach with hands and arms; climb or balance; and stoop, kneel, crouch, or crawl. The employee must frequently lift and/or move up to 50 pounds. Specific vision abilities required by this job include close vision, distance vision, color vision, peripheral vision, depth perception, and ability to adjust focus.

While performing the duties of this job, the employee is occasionally exposed to moving mechanical parts; high, precarious places; fumes or airborne particles; extreme heat; risk of electrical shock; and vibration. The noise level in the work environment is usually moderate.

NOTICE: The above job profile does not include all essential and nonessential duties of this job. All employees with disabilities are encouraged to contact Human Resources to review and discuss the essential and nonessential functions of the job. An employee with a disability can evaluate the job in greater detail to determine if she/he can safely perform the essential function of this job with or without reasonable accommodation.