IT Associate Director Cybersecurity

Florida International University is a top public university that drives real talent and innovation in Miami and globally. Very high research (R1) activity and high social mobility come together at FIU to uplift and accelerate learner success in a global city by focusing in the areas of environment, health, innovation, and justice. Today, FIU has two campuses and multiple centers. FIU serves a diverse student body of more than 56,000 and 290,000 Panther alumni. U.S. News and World Report places dozens of FIU programs among the best in the nation, including international business at No. 2. Washington Monthly Magazine ranks FIU among the top 20 public universities contributing to the public good.

Supports the CISO in the development, growth and management of all areas of the IT Security Office and the IT Security Program. Assists with the management and oversight of security related projects. Assists in the development, implementation, monitoring and reporting of control processes, and documentation in the FIU Information Security Office. Assist with the overall cyber security and risk posture of the University. Provides oversight regarding audit, regulatory and risk management activities across IT areas, such as the development and maintenance of regulatory documentation. Reports directly to the Chief Information Security Officer (CISO).

• Assists in developing, implementing and managing the Information Security Program, prioritizing projects and duties within the information security office to maintain alignment with FIU's strategic goals.
• Assists with identifying and reviewing security control deficiencies and provides recommendations and action plans.
• Assists in the development of IT security strategic planning, budget planning and other administrative tasks as they relate to security initiatives.
• Improves the work environment; promote a culture of security; enhance the skill and professional development of IT staff; and assist in shaping a workforce that values individuals, teams, and accountability.
• Develops and maintains policy, standards, processes and procedures to assess, monitor, report, escalate and remediate IT risk and compliance related issues.
• Works collaboratively with other members of the security team to design application and system security requirements.
• Assists in the development and manage security and risk assessments.
• Provides subject matter expertise. Leads security initiatives and the implementation of technology, process, and procedures in various security domains including endpoint protection, network protection, event monitoring, vulnerability management, configuration management and incident response.
• Works collaboratively with the Office of University Compliance and Integrity, Office of Internal Audit and various technical teams in the design and implementation of audit, risk assessment and regulatory compliance practices for IT.
• Reviews and revises security and privacy terms in contracts.
• Supports the development, implementation, communication, monitoring and maintenance of information security policies and procedures to promote secure operations in academic, administrative and research programs; and provides subject matter expertise for cutting-edge employee awareness, education and training.
• Develops key performance indicators in order to assess university security program.
• Performs essential duties during any emergencies, such as hurricanes, storms and/or any other University emergency closing. The employee is expected to be available to report to work as needed during University emergency closings with appropriate notification by department administrator.

• Bachelor's degree in related discipline with six (6) years of experience in related field including managerial experience.

• Experience with network, server and cloud-based security.
• Experience working with virtual environments.
• Experience of digital forensics tools.
• Experience with the application security concepts, penetration testing techniques, and incident forensics.
• Experience with the NIST Cybersecurity Framework.
• IT security experience with a broad range of exposure to data, networks, systems and web applications preferred.
• Advanced level knowledge of IT security governance, risk, and compliance (GRC), auditing, vendor risk management, vulnerability management and risk management preferred.
• Understanding of and recent familiarity with privacy and compliance issues requiring programmatic information security control (PII privacy, HIPAA, PCI-DSS, FERPA, GLBA, GDPR, etc.)
• Advanced level knowledge of new and emerging technologies including cloud infrastructure, network topology, network/infrastructure security, data center, operating systems, next generation firewalls, logging, security operations monitoring, network operating systems, and web technologies.
• Experience working with SIEM solutions.
• CISSP, CISM, CRISC, CISA and other industry certifications preferred.

• Administrative

• $135,000 - $145,000

Begin time: 8:30 AM
End time: 5:00 PM

• Expanded Background Check

• Ability to work evenings and weekends.
• Ability to work flexible hours as needed.
• Must be available 24/7 for possible emergency situations.

Prospective Employee

If you have not created a registered account, you will be asked to create a username and password for use of the system. It is recommended that you provide an active/valid e-mail account as that will be the main source of communication regarding your status within the process. In this account, you are able to track your applicant status in "My Applications".

To be considered eligible for the position as an internal candidate, departmental staff must meet minimum requirements of the position and be in good performance standing.

Before you begin the process, we recommend that you are prepared to attach electronic copies of your resume, cover letter or any other documents within the application process. It is recommended that you combine your cover letter and resume/curriculum vitae into one attachment. Attached documents should be in Microsoft Word or PDF format. All applicants are required to complete the online application including work history and educational details (if applicable), even when attaching a resume.

*This posting will close at 12:00 am of the close date.

Current Employee

As a current employee, you must log into Employee Self Service (ESS) to apply for this and any other internal career opportunity of interest. In this account, you are able to track your applicant status in "My Applications".

To be considered eligible for the position as an internal candidate, departmental staff must meet minimum requirements of the position and be in good performance standing.

Before you begin the process, we recommend that you are prepared to attach electronic copies of your resume/ curriculum vitae, cover letter or any other documents within the application process. It is recommended that you combine your cover letter and resume into one attachment. Attached documents should be in Microsoft Word or PDF format.

*This posting will close at 12:00 am of the close date.

Clery Notice

In compliance with the Jeanne Clery Disclosure of Campus Security Policy and Crime Statistics Act, the University Police department at Florida International University provides information on crimes statistics, crime prevention, law enforcement, crime reporting, and other related issues for the past three (3) calendar years. The FIU Annual Security report is available online at: https://police.fiu.edu/download/annual-security-fire-safety-report/.

To obtain a paper copy of the report, please visit the FIU Police Department located at 885 SW 109th Avenue, Miami, FL, 33199 (PG5 Market Station).

Pay Transparency

Florida International University will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information.

FIU is a member of the State University System of Florida and an Equal Opportunity, Equal Access, Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.