Deputy Chief Information Security Officer

Job Summary

Provides strategic leadership and direction for the institution’s information security program. This role ensures the development, implementation, and continuous improvement of enterprise-wide security strategies, policies, and operations to effectively manage risk and support the university’s academic, research, and administrative missions.

Job Description

• Leads the development and execution of a comprehensive information security strategy and multi-year roadmap aligned with institutional priorities and risk tolerance
• Provides oversight of key cybersecurity domains, such as security operations, governance, risk and compliance, identity and access management, and infrastructure security
• Establishes and enforces information security policies, standards, and procedures to ensure compliance with regulatory and contractual requirements
• Directs institutional response to cybersecurity incidents, vulnerabilities, and emerging threats, coordinating across technical and non-technical stakeholders
• Partners with senior leadership, academic units, and administrative functions to integrate security practices into university operations while enabling research and innovation
• Develops and communicates security metrics, risks, and recommendations to executive leadership, governing bodies, and external stakeholders
• Oversees security-related budgeting, resource planning, and vendor management to support program effectiveness and sustainability
• Leads, develops, and scales information security teams, fostering a culture of accountability, collaboration, and continuous improvement