Director - IT Security

About This Role

Directing the IT security program is the core of this full-time, permanent position, which provides strategic leadership and oversight of the institution’s cybersecurity posture. This critical role ensures that the College’s information systems are protected from internal and external threats by developing, implementing, and maintaining security protocols and training programs. The Director will guide security-related decisions, proactively manage risk, and promote a culture of cybersecurity awareness across the organization.

Responsibilities

• Lead the College’s information security program, including development and delivery of cybersecurity awareness training and policy education
• Collaborate with departments including Internal Audit and Finance/Controller to identify risks and implement IT risk mitigation strategies
• Research and stay current on emerging cybersecurity threats, tools, and trends
• Monitor institutional networks and systems for security breaches; respond to and investigate incidents as needed
• Provide leadership, guidance, and supervision to security, identity management, and compliance staff
• Oversee the College’s incident response plan and ensure policy compliance; lead efforts to remediate violations
• Direct the implementation of security tools such as firewalls, encryption, and monitoring software
• Recommend and implement IT security standards and best practices
• Assist technical staff and end users with the deployment and understanding of security tools and practices
• Coordinate and conduct periodic IT security audits
• Maintain up-to-date knowledge of cybersecurity through professional development and industry resources
• Perform other duties as assigned

Requirements

• Bachelor’s degree in Information Technology, Cybersecurity, Audit or a related field
• Three (3) to five (5) years of relevant IT experience with a focus on cybersecurity
• Demonstrated knowledge of network security technologies, protocols, and practices
• Proven ability to communicate effectively with both technical and non-technical stakeholders
• Strong interpersonal, verbal, and written communication skills
• Excellent problem-solving, analytical, time management, and organizational skills

Nice to have:

• CISSP certification (or equivalent experience)
• Project Management certification (e.g., PMP)
• Experience in higher education or similarly complex environments
• Familiarity with security compliance frameworks (e.g., NIST, FERPA, HIPAA)
• Leadership experience in cross-functional IT teams or cybersecurity projects

Important Details