About FIU Florida International University is a top public university that drives real talent and innovation in Miami and globally. Very high research (R1) activity and high social mobility come together at FIU to uplift and accelerate learner success in a global city by focusing in the areas of environment, health, innovation, and justice. Today, FIU has two campuses and multiple centers. FIU serves a diverse student body of more than 56,000 and 290,000 Panther alumni. U.S. News and World Report places dozens of FIU programs among the best in the nation, including international business at No. 2. Washington Monthly Magazine ranks FIU among the top 20 public universities contributing to the public good. Job Summary Supports the CISO in the development, growth and management of all areas of the IT Security Office and the IT Security Program. Assists with the management and oversight of security related projects. Assists in the development, implementation, monitoring and reporting of control processes, and documentation in the FIU Information Security Office. Assist with the overall cyber security and risk posture of the University. Provides oversight regarding audit, regulatory and risk management activities across IT areas, such as the development and maintenance of regulatory documentation. Reports directly to the Chief Information Security Officer (CISO). Assists in developing, implementing and managing the Information Security Program, prioritizing projects and duties within the information security office to maintain alignment with FIU's strategic goals. Assists with identifying and reviewing security control deficiencies and provides recommendations and action plans. Assists in the development of IT security strategic planning, budget planning and other administrative tasks as they relate to security initiatives. Improves the work environment; promote a culture of security; enhance the skill and professional development of IT staff; and assist in shaping a workforce that values individuals, teams, and accountability. Develops and maintains policy, standards, processes and procedures to assess, monitor, report, escalate and remediate IT risk and compliance related issues. Works collaboratively with other members of the security team to design application and system security requirements. Assists in the development and manage security and risk assessments. Provides subject matter expertise. Leads security initiatives and the implementation of technology, process, and procedures in various security domains including endpoint protection, network protection, event monitoring, vulnerability management, configuration management and incident response. Works collaboratively with the Office of University Compliance and Integrity, Office of Internal Audit and various technical teams in the design and implementation of audit, risk assessment and regulatory compliance practices for IT. Reviews and revises security and privacy terms in contracts. Supports the development, implementation, communication, monitoring and maintenance of information security policies and procedures to promote secure operations in academic, administrative and research programs; and provides subject matter expertise for cutting-edge employee awareness, education and training. Develops key performance indicators in order to assess university security program. Performs essential duties during any emergencies, such as hurricanes, storms and / or any other University emergency closing. The employee is expected to be available to report to work as needed during University emergency closings with appropriate notification by department administrator. Minimum Qualifications Bachelor's degree in related discipline with six (6) years of experience in related field including managerial experience. Desired Qualifications Experience with network, server and cloud-based security. Experience working with virtual environments. Experience of digital forensics tools. Experience with the application security concepts, penetration testing techniques, and incident forensics. Experience with the NIST Cybersecurity Framework. IT security experience with a broad range of exposure to data, networks, systems and web applications preferred. Advanced level knowledge of IT security governance, risk, and compliance (GRC), auditing, vendor risk management, vulnerability management and risk management preferred. Understanding of and recent familiarity with privacy and compliance issues requiring programmatic information security control (PII privacy, HIPAA, PCI-DSS, FERPA, GLBA, GDPR, etc.) Advanced level knowledge of new and emerging technologies including cloud infrastructure, network topology, network / infrastructure security, data center, operating systems, next generation firewalls, logging, security operations monitoring, network operating systems, and web technologies. Experience working with SIEM solutions. CISSP, CISM, CRISC, CISA and other industry certifications preferred. Job Category Administrative Advertised Salary $135,000 - $145,000 Work Schedule Begin time : 8 : 30 AM; End time : 5 : 00 PM Pre-Employment Requirements Expanded Background Check Other Information Ability to work evenings and weekends. Ability to work flexible hours as needed. Must be available 24 / 7 for possible emergency situations. How To Apply Prospective Employee If you have not created a registered account, you will be asked to create a username and password for use of the system. It is recommended that you provide an active / valid e-mail account as that will be the main source of communication regarding your status within the process. In this account, you are able to track your applicant status in "My Applications". To be considered eligible for the position as an internal candidate, departmental staff must meet minimum requirements of the position and be in good performance standing. Before you begin the process, we recommend that you are prepared to attach electronic copies of your resume, cover letter or any other documents within the application process. It is recommended that you combine your cover letter and resume / curriculum vitae into one attachment. Attached documents should be in Microsoft Word or PDF format. All applicants are required to complete the online application including work history and educational details (if applicable), even when attaching a resume.
Director Cybersecurity • Miami, FL, United States