Information Security Officer

Location:

Ephraim

Public Services Librarian Qualifications

• Bachelor’s Degree required in Business Administration or a technology-related field.
• 3 or more years of experience in a combination of Risk Management, Information Security and IT jobs.
• In-depth functional knowledge and expertise in development and execution of project plans and delivery of results.
• Requires application of professional theories to conduct analytical/problem-solving and technical skills.
• Requires the application of functional expertise in related area and general knowledge across multiple areas of IT and cross-functional activities.
• Must be able to work under general direction with the authority to make decisions regarding the planning and execution of his or her department.
• Ability to lead and set direction for the work of others.
• Ability to exchange information, present recommendations and collaborate with colleagues and peers within the College and possibly externally.
• Excellent written and verbal communication skills; interpersonal and collaborative skills; and the ability to communicate security and risk-related concepts to technical and nontechnical audiences.
• Must be a critical thinker with strong problem-solving skills.
• Knowledge and understanding of relevant legal and regulatory requirements, such as Health Insurance Portability and Accountability Act (HIPAA), Payment Card Industry/Data Security Standard, Gramm-Leach Bliley Act, Family Educational Rights and Privacy Act, and Fair and Accurate Credit Transactions Act (Red Flags Rule).
• Project management skills; financial/budget management, scheduling and resource management.
• Ability to lead and motivate cross-functional, interdisciplinary teams to achieve tactical and strategic goals.
• Proficient with computers; experience with productivity software, such as Windows, Microsoft Office software and so forth.
• Knowledge of common information security management frameworks, such as SANS 20 Critical Controls, ISO/IEC 27001, ITIL, COBIT and ones from NIST.
• High level of personal integrity, and the ability to professionally handle confidential matters and exhibit the appropriate level of judgment and maturity.
• High degree of initiative and dependability.
• Ability to communicate effectively both verbally and in written format.
• Have experience with providing independent assessments and correlations of security schemes.

Preference shall be considered if the applicant has:

• a Graduate degree in a related field.
• a professional security management certification, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information systems Auditor (CISA), the GIAC Critical Controls Certification (GCCC), or other similar credentials.
• experience developing and implementing automated systems.

Job Responsibilities:

The Information Security Officer (ISO) is responsible for maintaining a College wide information security management program to ensure that information assets are adequately protected. This will include implementing and maintaining current Snow College policies as well as improving and/or developing additional policies with the help of Key IT offices. This position is responsible for identifying, evaluating and reporting on information security risks in a manner that meets State of Utah and USHE compliance and regulatory requirements, and aligns with and supports the risk posture of Snow College.

The ISO position requires a visionary leader with sound knowledge of business management and a working knowledge of information security technologies. The ISO will proactively work with business units to implement practices that meet defined policies and standards for information security. He or she will also oversee a variety of IT-related risk management activities.

The ISO serves as the process owner of all assurance activities related to the availability, integrity and confidentiality of student, business partner, employee and business information in compliance with the organization’s information technology policies and standards. A key element of the ISO’s role is working with the management team to determine acceptable levels of risk for the College.