Chief Information Security Officer

Chief Information Security Officer

Facilities and Business Operations at UCF is dedicated to fostering a conducive educational environment for our faculty, staff, students, and the broader community. We are committed to excellence, providing unparalleled expertise, and maintaining a world-class standard in service.

The UCF IT department within Facilities and Business Operations is seeking to hire a Chief Information Security Officer (CISO). This role is responsible for leading, developing, and managing the organization's comprehensive information security program.

The Chief Information Security Officer (CISO) plays a pivotal role in the organization and is responsible for leading, developing, and managing the organization's comprehensive information security program. This position will oversee incident response, forensic investigations, risk management, compliance, and security awareness initiatives. The CISO establishes and enforces standards, policies, and governance frameworks to safeguard the organization's information technology assets and ensure alignment with regulatory requirements and industry best practices.

Responsibilities include :

Strategic Leadership and Planning :

• Develop, implement, and oversee the university's enterprise-wide information security strategy, policies, and procedures.
• Align security initiatives with institutional goals such as digital transformation, research excellence, and compliance with FERPA, HIPAA, NIST, GLBA, and Florida state laws.
• Introduce modern security tools and capabilities, and cultivate a skilled workforce to stay ahead of emerging threats from nation-state and criminal actors.

Risk Management and Compliance :

Security Operations and Incident Response :

Awareness and Training :

Network Operations and Engineering :

Stakeholder Engagement and Advisory :

Team Leadership and Development :

Innovation in Research Security :

Minimum qualifications include a Bachelor's or Master's degree and 12+ years of relevant experience with at least 5+ years of leadership experience. Preferred qualifications include a Master's degree or Doctorate in Information Security, Computer Science, Information Technology, or related discipline, 10+ years of progressive experience in information security leadership, professional certifications such as CISSP, CISM, CISA, CRISC, or equivalent, experience working in higher education, research-intensive (R1) institutions, or large complex organizations, expertise in securing research data, intellectual property, and compliance with grant and funding agency requirements, familiarity with advanced technologies, including AI / ML, cloud platforms, and high-performance computing environments, strong background in building partnerships with federal agencies (FBI, DHS, DoD) and higher-education security consortia, demonstrated success leading network modernization and security integration projects at scale, strong knowledge of regulatory and compliance requirements such as FERPA, HIPAA, GLBA, NIST, and state / federal privacy laws, demonstrated experience leading security operations, incident response, risk management, and governance programs, proven ability to communicate complex technical risks and solutions to executives, governing boards, and non-technical stakeholders, experience managing budgets, vendor contracts, and cross-functional teams, and effective leadership skills with experience supervising, mentoring, and developing security professionals.