Chief Information Security Officer

Job Summary

The Chief Information Security Officer (CISO) is a senior-level IT leadership position responsible for overseeing the enterprise cybersecurity program and providing strategic leadership in IT governance, risk and cross-functional management of information and technology security across the organization.

Job Description

Typical duties include but are not limited to :

• Partners and leads the cybersecurity function across the organization to ensure consistent, high-quality information security management in support of the organization goals.
• Develops the cybersecurity strategy and operating model in collaboration with stakeholders, ensuring alignment with the organization's risk management approach and compliance monitoring for non-digital risk areas.
• Establishes a cybersecurity governance framework by implementing a structured governance program, including the creation of a cybersecurity steering committee or advisory board.
• Collaborates with the procurement office to ensure cybersecurity requirements are integrated into contracts by coordinating with vendor management and procurement teams.
• Develops and updates policies and procedures to safeguard information assets, addressing emerging threats and industry standards while identifying, evaluating, and managing cybersecurity risks to the organization.
• Oversees risk evaluation and compliance management processes while developing risk management frameworks to prioritize and mitigate potential cybersecurity threats, vulnerabilities, and incidents.
• Advises on the cyber risk posture of the organization, including the mandatory application of controls.
• Ensures the organization complies with relevant legal, regulatory, and industry standards. Maintains awareness of evolving laws and regulations to ensure ongoing compliance.
• Manages resources in alignment with the IT workforce plan and supports the CIO in budgeting for the cybersecurity function by monitoring and reporting any discrepancies.
• Develops a cybersecurity vision and strategy aligned with organizational priorities to support business objectives while securing senior stakeholder buy-in. This includes creating, implementing, and monitoring a comprehensive cybersecurity program that ensures the confidentiality, integrity, and availability of the organization's information assets, as well as compliance with safety, privacy, reliability, and resilience requirements.
• Manages and contains cybersecurity incidents and events to protect corporate IT assets, intellectual property, regulated data and the company's reputation.
• Manages an effective cybersecurity organization consisting of direct reports including hiring, training, staff development, performance management and review process.
• Leads the development of IT policies, procedures, and performance management processes, while providing guidance on information security governance to ensure that security initiatives are effectively integrated throughout the organization.
• Liaises with external agencies, including law enforcement, SUS CISOs, and other advisory bodies, to ensure the organization maintains a strong security posture and stays informed of relevant threats identified by these entities.
• Stays current with developments in new market trends and innovations in Cybersecurity and technology.

Other Duties :

Additional Job Description

Required Qualifications :

Preferred Qualifications :

Knowledge, Skills, and Abilities :

Salary : $130,000 - $155,000

FGCU is a State University System of Florida member and an Equal Opportunity and Equal Access employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, disability, or protected veteran status.