Chief Information Security, Compliance and Risk OfficerCISO
Job Location:
Fullerton, CA - USA
Monthly Salary:
Posted:
Application Deadline:
Vacancies:
Job Summary
Job Title | Chief Information Security Compliance and Risk Officer/CISO |
Classification | Administrator III |
Auto Req. ID | 561240 |
Salary Range | Classification Range $6891 - $22119 per month (Hiring range depending on qualifications not anticipated to exceed $14500 - $17700 per month) |
Work Schedule | Monday - Friday 8:00 AM - 5:00 PM; occasional early morning evening and/or weekend hours. |
Why CSUF | California State University Fullerton (Cal State Fullerton) is a leading public university committed to student success academic excellence and inclusive excellence. The university fosters a collaborative environment that supports teaching research and service while promoting innovation and professional growth. Cal State Fullerton is both a Hispanic-Serving Institution and an Asian American and Native American Pacific Islander-Serving Institution and a recipient of the Seal of Excelencia (2021 and 2024) from Excelencia in Education. Joining Cal State Fullerton means becoming part of a community dedicated to advancing student achievement career success and economic mobility. |
Department | The Division of Information Technology (IT) strives to be a strategic innovative and bestinclass IT organization that provides a leadingedge technology environment for students faculty and staff to advance the Universitys mission vision and goals. We are seeking an exceptional individual to join our IT Information Security department as the Chief Information Security Compliance and Risk Officer/CISO (Administrator III).The ideal candidate in this role should have a positive attitude an active energetic mind and a leadership style that is characterized by highly ethical practices and a commitment to inclusivity openness flexibility integrity and kindness. |
Duties and Responsibilities | Reporting to the Vice President for Information Technology/Chief Information Officer (CIO) the Chief Information Security Compliance and Risk Officer/CISO is responsible for planning developing implementing and monitoring the institutional information security privacy digital compliance and cyber risk programs. The position oversees the institutional cyber risk management policy and governance program. The CISO works collaboratively with campus partners to establish campus security standards coordinate audit responses and corrective actions and oversees third-party and cloud risks. The CISO owns the cybersecurity incident response program leads executive-level response to high-impact incidents and provides guidance for business continuity and disaster recovery. The position establishes and reports meaningful measures of program effectiveness directs campus-wide security privacy compliance and risk awareness training and communication and serves as a campus representative to the Cal State University (CSU) System on matters related to information security privacy and accessibility matters. The Chief Information Security Compliance and Risk Officer/CISO establishes and stewards the multi-year vision strategy and capability roadmap for security privacy compliance and risk across the University aligned with CSU systemwide policy applicable regulatory frameworks and campus strategic priorities. The position leads the Information Security and Compliance Office investing in workforce development and service delivery and builds the offices multi-year resource forecast including funding staffing and tools. The position handles highly confidential and sensitive institutional information and may participate in emergency or crisis-management activities. Other duties as assigned. |
Inclusive Leadership Statement | Inclusive Leadership Statement is required below please be sure to address the following as a minimum. Please add additional information as you see necessary and applicable: What doesinclusive leadership mean to you. A description of your experiences working with individuals with a different perspective. A description of how issues of inclusivityhave impacted you personally or professionally. |
Essential Qualifications | Bachelors degree from an accredited four-year college or university in computer science information systems cybersecurity public administration business administration or a related field. Eight or more years of progressively responsible experience in information security cyber risk or IT compliance including significant leadership experience managing teams and programs. Demonstrated experience setting strategic direction and roadmap for a cybersecurity compliance or risk program in a complex multi-stakeholder environment. Demonstrated knowledge of information security and privacy regulations and frameworks applicable to higher education (e.g. Family Educational Rights and Privacy Act (FERPA) Health Insurance Portability and Accountability Act (HIPAA) Gramm-Leach-Bliley Act (GLBA) Payment Card Industry Data Security Standard (PCI DSS) California Consumer Privacy Act (CCPA) General Data Protection Regulation (GDPR) National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) NIST 800-53 International Organization for Standardization (ISO) 27001). Experience leading or supporting cybersecurity incident response at an executive level including coordination with legal communications and external partners. Demonstrated ability to translate complex technical policy and regulatory concepts into clear guidance for executive leadership and non-technical audiences. Strong interpersonal written and verbal communication skills including the ability to facilitate cross-functional collaboration and build consensus. A background check (including a criminal records check) must be completed satisfactorily and is required for employment. CSU will make a conditional offer of employment which may be rescinded if the background check reveals disqualifying information and/or it is discovered that the candidate knowingly withheld or falsified information. Failure to complete the background check satisfactorily may affect the continued employment of a current CSU employee who was conditionally offered the position. |
Preferred Qualifications | Masters degree in information assurance cybersecurity public administration business administration law or a related field. Professional certification(s) in one or more of the following: Certified Information Systems Security Professional (CISSP) Certified Information Security Manager (CISM) Cybersecurity and Infrastructure Security Agency (CISA) Certified in Risk and Information Systems Control (CRISC) Certified in the Governance of Enterprise IT (CGEIT) Certified Information Privacy Professional (CIPP) Certified Information Privacy Manager (CIPM) Certified Data Privacy Solutions Engineer (CDPSE) or equivalent. Experience working in higher education particularly within the California State University (CSU) system or another large public university environment. Direct experience serving as a CISO Chief Privacy Officer or equivalent senior executive in cybersecurity compliance or risk. Experience with audit response and engagement with internal external and systemwide auditors. |
License/Certifications | A valid California drivers license. |
Special Working Conditions | |
Benefits at a Glance |
|
Additional Information | California State University Fullerton is committed to fostering an environment where students staff administrators and faculty thrive. We welcome individuals ready to make an impact on student and staff success to apply and become part of the Titan Community. Reasonable accommodations will be provided for qualified applicants with disabilities who self-disclose. Cal State Fullerton is an equal opportunity employer that prohibits discrimination based on regardless of race sex color ethnicity national origin or any other protected status. As of January 1 2022 the CSU Out-of-State Employment Policy prohibits the hiring of employees to perform CSU-related work outside the state of California. The scope of responsibilities for this position includes the making or participating in the making of decisions that may have a material financial benefit on the incumbent. Therefore you will be required to file an initial Conflict of Interest Form 700: Statement of Economic Interests within thirty (30) days from date of hire and on an annual basis; and complete the CSU sponsored ethics on-line training within thirty (30) days of appointment and at least once during each consecutive period of two calendar years following the appointment. The person holding this position is considered a limited mandated reporter under the California Child Abuse and Neglect Reporting Act and must comply with the requirement outlined in CSU Executive Order 1083 revised July 21 2017. This position is designated as a Campus Security Authority (CSA) position under the federal Jeanne Clery Disclosure of Campus Security Policy and Campus Crime Statistics Act. CSAs are responsible for reporting allegations of Clery Act Crimes reported to them or that they witness. CSA training is required. Applicants will be required to disclose whether they have received a final administrative decision or final judicial decision determining that they have committed sexual harassment within the last 7 years only after a determination is made that they meet the minimum qualifications for the position and before an offer of employment is extended. Applicants who reach the final stages of the application process must also sign a release form that authorizes the release of information by the applicants current and/or former employers to the CSU concerning any substantiated allegations of misconduct. Multiple positions may be hired from this recruitment based on the strength of the applicant pool. If you are applying for a staff position please note that you are not eligible to work concurrently in a staff position and an Academic Student position such as a Graduate Assistant Teaching Associate Instructional Student Assistant or Student Assistant position. Regular attendance is considered an essential job function; the inability to meet attendance requirements may preclude the employee from retaining employment. Employee/applicant who applies for a position may be required to successfully complete job-related performance test(s) as part of the selection process. Online application/resume must be received by electronic submission on the final filing date by 9:00 PM (Pacific Standard Time)/midnight (Eastern Standard Time). Applicants who fail to complete all sections of the online application form will be disqualified from consideration. California State University Fullerton is not currently sponsoring anynewH-1B petitions for staff management or faculty positions. |
Required Experience:
Chief
About Company
Launch your career at CSUF, a top public Southern California university. 110 affordable degree programs. Large, diverse, supportive CSU campus.
