Provides strategic leadership for the university’s enterprise information security program in alignment with institutional goals and risk appetite.
Partners with the AVP, Information Security, to define long‑term security strategy, multi‑year roadmaps, and program maturity objectives.
Serves as a senior advisor to IT and university leadership on cybersecurity risk, threat trends, and control effectiveness.
Establishes and maintains security governance frameworks, policies, standards, and metrics aligned with recognized frameworks.
Leads institutional cybersecurity risk assessments and maturity evaluations, ensuring results inform investment and prioritization decisions.
Provides executive‑level reporting and briefings on security posture, risk trends, incidents, and compliance status.
Directs the design, implementation, and operation of security controls across on‑premises, cloud, and SaaS environments.
Oversees security monitoring, detection, and response capabilities, including SIEM, endpoint protection, identity security, and network defense.
Serves as executive lead for cybersecurity incident response, ensuring effective coordination, decision‑making, communications, and post‑incident improvement.
Guides vulnerability management, penetration testing, and remediation strategies across the enterprise.
Owns the university’s information security risk management program, including risk identification, assessment, treatment, and tracking.

Bachelor’s degree in Information Security, Computer Science, or a related field required; Master’s degree preferred.
Minimum of Ten (10) years of progressive experience in information security or technology risk management.
Minimum of Five (5) years of leadership experience managing teams and enterprise‑level security programs.
Professional certifications such as CISSP, CISM, GIAC, or equivalent required.
Experience in higher education or large enterprise environments preferred.
Demonstrated experience across multiple security domains: operations, governance, risk management, and access control.

Director, Information Security

Key skills