|
|
|
California State University, Northridge, long known for the intellectual, social, and cultural relevance of its 200 academic programs and engaged centers; embraces innovation in community service, and hands-on experience and rigor. A minority-serving university in a globally diverse region, it is a national leader in preparing teachers for K-12 and first generation college students for graduate studies. Cal State Northridge is a park-like campus located in the San Fernando Valley with 1.8 million people, 20 miles northwest of downtown Los Angeles. 1,700 of its 34,000 students are international. Cal State Northridge is a welcoming university; we value accessibility, academic excellence, and student achievement. |
|
|
| Under the general direction of the Vice President for Information Technology/Chief Information Officer, the Information Security Officer (ISO) has the primary responsibility to determine the efficacy of the campus-wide security infrastructure; develop standardized campus-wide information security policies and procedures that affect the University divisions, colleges, and auxiliaries; and enforce campus compliance with information security laws, rules, and regulations. The ISO will identify foreseeable internal and external information security risks; perform risk and cost benefit analyses to determine appropriate levels of security controls; monitor systems (including our PeopleSoft applications and other paper-based document processing systems) to ensure compliance with privacy and information security policies and procedures; identify and reduce security vulnerabilities; and monitor and investigate complaints of non-compliance. The ISO will also serve as primary liaison with various University officials, including but not limited to the Director of Public Safety and the Director of Internal Auditing; advise on campus-wide security related administration; and serve as liaison with other campus ISO’s, the Chancellor’s Office ISO, and outside auditors and organizations related to information security issues.
|
| Qualifications: |
| Bachelor’s degree from a four-year college or university in Computer Science, Computer Information Systems, Management Information Systems, Business Administration, Public Policy, Law or other related field required. Advanced degree highly desirable. Minimum of five (5) years of experience in computing or related area with a focus on technology, management, policy and security. Experience in higher education strongly preferred. Familiarity with current security policy compliance requirements such as FERPA, HIPAA, Sarbanes-Oxley, and Gramm-Leach-Bliley. One or more of the following certifications: CISSP (Certified Information Systems Security Professional), PMP (Project Management Professional), GIAC (Global Information Assurance Certificate), SSCP (Systems Security Certified Practitioner), CISA (Certified Information Systems Auditor). Experience in the development and implementation of planning security policies, procedures, and/or safeguards. Extensive knowledge of security administration and computer security tools. Successful experience in retrieving, analyzing, reporting, addressing and/or tracking security intrusions and vulnerabilities. Knowledge of university policies and procedures as they relate to IT security issues. Demonstrated ability to coordinate and supervise. Demonstrated ability to present plans and proposals to executive management. Demonstrated knowledge in systems design, development, documentation, testing, implementation and/or maintenance. Must possess excellent verbal and written communication skills, and excellent organizational abilities. Proven technical and functional problem solving, tracking and resolution skills, and ability to manage complex projects |
| Salary/Benefits: Salary is dependent upon qualifications. The university offers excellent fringe benefits. |
| Effective
Date of Appointment: As soon as possible.
|
| Applications: Candidates must submit a cover letter, current resume including the names and contact information of three professional references, and salary history for the last five years. Review of applications begins February 18, 2008 and will continue until position is filled. Submit application to: |
|
The university is an Equal Opportunity Employer and does not discriminate against persons on the basis of age, disability, disabled veteran or Vietnam-era veteran status, gender, marital status, national origin, race, religion, or sexual orientation
M680_ Information Security Officer_IT_2/8/08 |