About This Role:

The CISO partners with the CIO in leading IT day-to-day Detection and Response technologies and functions to improve the university cyber posture and detection and response functions.

Duties include but are not limited to:

• Lead the development and management of the university's information security strategy, ensuring comprehensive cybersecurity measures protect against threats to both cloud and on-premises resources.
• Oversee the operational aspects of cybersecurity, including threat monitoring (detect), incident response(respond), security audits, and compliance assessments to ensure the integrity, confidentiality, and availability of information assets.
• Manage relationships with cybersecurity service providers, ensuring SLAs are met and that services align with university needs and budget constraints.
• Develop and implement policies and procedures for information security governance, risk management, compliance, and data protection, ensuring adherence across cloud and on-premises environments.
• Lead and develop the Information Security team, promoting skills advancement in cybersecurity technologies, operations, and best practices.
• Foster a culture of security awareness, continuous learning, and adaptability within the team and across the university, aligning skill development with strategic needs and emerging threats.

Why Join Us:

Kansas State University offers a comprehensive benefits package that includes health insurance, life insurance, retirement plans, paid time off - vacation, sick, and holidays. To see what benefits are available, please visit: https://www.k-state.edu/hcs/benefits

We Support Diversity and Inclusion:

Kansas State University embraces diversity and inclusion. The university actively seeks individuals who foster a collegial environment and cooperative interactions with coworkers, students, and others. The University is dedicated to promoting the Principles of Community.

Worksite Options:

This position is required to be performed on-site. Work is performed on employer premises or designated assignment location.

What You'll Need to Succeed:

Minimum Qualifications:

• Bachelor's degree plus ten years of relevant experience.

Preferred Qualifications:

• A bachelor's or master's degree in Computer Science, Information Systems, Cybersecurity, or a related field is preferred. Additional certifications in information security (e.g., CISSP, CISM, CEH, GIAC) are highly preferred.
• Extensive experience in developing and managing comprehensive information security programs, including but not limited to cybersecurity strategies, risk management, data protection, and compliance frameworks.
• Deep understanding of information security technologies, trends, best practices, and regulatory requirements, with experience in designing and implementing detection and response security controls and measures.
• Excellent project management skills, capable of leading complex information security projects, including security infrastructure enhancements, policy development, and incident response plans.
• Experience in vendor and stakeholder management, including SLA negotiation, and partnership development to support security initiatives.
• Strong analytical, strategic planning, and communication skills, with the ability to articulate complex security concepts to non-technical stakeholders and influence decision-making at the executive level.
• Demonstrated ability to foster a culture of security awareness, innovation, and continuous improvement within the IT department and across the organization.

Other Requirements:

• Leadership in Information Security: Demonstrated ability to lead with a strategic vision in the domain of information security, executing critical strategies within areas of responsibility. Ability to inspire and propel the team toward achieving the goals of the cybersecurity department.
• Cybersecurity Expertise: Extensive knowledge of current cybersecurity practices and frameworks, with a particular focus on applying these to protect organizational assets across various environments, including cloud. Capability to safeguard information assets, ensuring data privacy, integrity, and compliance with relevant standards and regulations.
• Information Security Detection and Response Mastery: Profound understanding of planning, operating, designing, deploying, and managing detection and response information security measures. This includes experience in modernizing IT security through innovative solutions to support organizational efficiency and compliance.
• Financial Management for Information Security Initiatives: Robust skills in budget planning, financial oversight, and resource management tailored to information security operations, ensuring strategic objectives are met within financial parameters.
• Security Technology Strategist: Expertise in assessing, selecting, and implementing current and emerging security technologies. Ability to align security solutions with organizational strategic objectives, thereby enhancing operational processes and risk management.
• Operational Excellence in Security Services: Capacity to improve operational efficiency and the effectiveness of security service delivery, ensuring high resilience, risk mitigation, and compliance across information systems and assets.
• Project Management for Security Initiatives: Exceptional project management skills demonstrated by successfully managing diverse cybersecurity projects. Ability to oversee complex security architecture, policy development, and incident response projects from start to finish.
• Effective Communication in Security: Excellent oral and written communication skills, with an ability to convey complex security issues to a non-technical audience. Proven ability to establish rapport, influence decision-making, and facilitate cohesive communication across all levels of the organization.
• Collaboration and Relationship Building in Security Environment: A track record of effective collaboration and relationship building, with strong interpersonal skills essential for fostering partnerships across various departments and with external security agencies or service providers to achieve unified security strategies.
• Analytical and Problem-Solving in Security Contexts: Strong analytical skills and the ability to solve complex problems related to information security and risk management. Ability to devise innovative solutions that advance the organization's security posture and compliance.
• Executive Support in Security Strategy and Operations: Demonstrated competency in advising and supporting senior executive leadership with insights and expertise in cybersecurity strategies and operations, aiding strategic planning and decision-making processes.
• Applicants must be currently authorized to work in the United States at the time of employment.

How to Apply:

Please submit the following documents:

1. Resume
2. Cover Letter
3. Contact information for three (3) professional references

Screening of Applications Begins:

Immediately and continues until position is filled.

Anticipated Hiring Pay Range:

$175,000-$200,000

Equal Employment Opportunity:

Kansas State University is an Equal Opportunity Employer. All applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender, gender identity, age, national origin, disability or status as a protected veteran.

Background Screening Statement:

In connection with your application for employment, Kansas State University will procure a Background Screen on you as part of the process of considering your candidacy as an employee.

Advertised: May 13, 2024 Central Daylight Time
Applications close: