Click here to view a list of current vacancies.
Chief Information Security Officer
Center for Drug Policy and Prevention
Vacancy number 301195
Position Type: Regular exempt grant-funded position with benefits package
Opens: 11/03/21 Closes: 03/08/22
Salary: Salary: Commensurate with qualifications
• excellent tuition remission benefits
• outstanding health benefits plans and rates
• at least 11 paid holidays each year
• 40 days of annual, personal, and sick leave each year, including 20+ annual leave days
• great retirement plans
The Chief Information Security Officer (CISO) will work within the Network Operations Center to effectively monitor and maintain the security of the Washington Baltimore HIDTA’s applications, databases, computers, and websites. The CISO will also be tasked with establishing enterprise-wide security policies, developing data breach resiliency plans, overseeing system update communications, and managing the information security financials.
We look forward to receiving your required electronic application with a cover letter and resume and learning about your interest in and qualifications for our vacancy. Please save your required cover letter and resume as one document and attach it in the resume location.
Key Responsibilities:
* Security operations-evaluating the IT threat landscape, devising cyber security policy and controls to reduce risk, lead auditing and compliance initiatives, and more. Provide real-time analysis of immediate threats and perform triage when something goes wrong. Establish partnerships with external resources and experts to ensure the best security measures are being provided to the HIDTA program. Perform other tasks like collaborate on technical projects, work with internal and external partners, evaluate employee behavior and organizational culture, and develop/provide training as needed.
* Compliance—ensuring that HIDTA is adaptable to evolving compliance regulations. Ensure that HIDTA is closely following the recommended security framework that has been established. Work with the NOC and participate in weekly meetings to go over progress as it pertains to the security framework.
* Disaster recovery—developing cyber resiliency so HIDTA can rapidly recover from hacking, security incidents, or infringements. Establish a communication channel to help recover from security infringements. Analyze incidents and implement improvements to the response strategy.
* Documentation-contributing to a variety of security policy domains associated with compliance, governance, risk management, incident management. Ensure that the documentation is up to date as per the current HIDTA policy. Create documentation that can help facilitate convenient access of information and provide reports that can be shared with executive management.
Education: Bachelor’s degree in a related field is required. Master’s degree in IT related field is preferred.
Experience: Must have at least 7 years’ experience working with security in the IT field with networking, systems administration and virtualization experience. Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), and/or Certified Chief Information Security Officer (CCISO) is preferred.
Required Knowledge, Skills and Abilities:
1. Communication and Presentation Skills: When working with executive leadership, for example, CISOs must know how to discuss information security in business terms so that it makes sense and resonates with the executive. Or when working with non-technical employees, the CISO must be able to explain security concepts in a way that is relevant to the individual’s specific role and responsibilities.
2. Knowledge and Understanding of the Business and its Mission: The CISO must work with the management team to ensure the security policies are properly implemented. The CISO should work with leadership to drive new security projects and support the ongoing security activities.
3. Incident Management: Establishing an incident response program that can detect intrusions on the network and immediately work to clean and recover from those intrusions is critical.
4. Knowledge of Regulation and Compliance with Standards: The CISO must be an authority in the regulation, standards and compliance requirements that are most applicable to the mission of HIDTA. This way, the CISO can tailor their research and learning efforts to meet the specific needs of HIDTA, leading to the development of more effective and relevant information security policies, processes, and procedures.
** Must be able to pass National Security background check and obtain a Secret Level security clearance. **
The University of Baltimore ("UB" or "University") does not discriminate on the basis of sex, gender, race, religion, age, disability, national origin, ethnicity, sexual orientation, gender identity, or other legally protected characteristics in its programs, activities or employment practices. UB is an Equal Opportunity/Affirmative Action/ADA Compliant Employer & Title IX Institution.
We appreciate your interest in our recruitment. Please review the information below before you visit http://www.ubalt.edu/candidate_gateway/erecruit.html to apply.
We need to receive your electronic application in our system by the vacancy closing date in order to consider you for the vacancy. Information follows about submitting the electronic application and attaching your cover letter and resume.
Applicant Instructions: Using Candidate Gateway to View and Apply for UB Vacancies
The Candidate Gateway system serves as your connection to the University of Baltimore’s job application process. It is a free, safe and secure way for you to apply for the job you want, and it allows the Office of Human Resources to maintain accurate records. Your use of the system does not require you to surrender any of your rights to privacy or confidentiality during the application process. Only qualified members of UB’s Human Resources team and members of the relevant search committee can access your application information. The search committee will not have access to any information you provide to HR for affirmative action reporting purposes.
Please read and print the information below before you apply, and refer to it as you enter your application.
NAVIGATION
A - COVER LETTER AND RESUME ATTACHMENT AND UPLOAD
Before you apply:
• Save one PDF or Word file with your cover letter, resume, and any additional information you would like to have considered.
When you apply:
•In Candidate Gateway: Click “Browse” to access the Word or PDF document you saved with all of your documents.
•Then, click “Upload” to attach it.
•Click “Continue” to continue the application process.
B - ENTER DATA ON THE FOLLOWING PAGES:
Each page shows this display:
Previous Save Submit Close Application Careers Home NEXT
above and below the required data for the four categories shown above.
Click “Save” to save the data you entered on that page. The message “You have successfully submitted your job application.” confirms only that you entered that page of information into the system. You must click “Next” to continue and complete the entire application process.
1. Current and Prior Employment/Work Experience:
•Enter employment information relevant to your position of interest.
•You can use the first day of the month wherever dates are required.
•After you enter your work experience, click “Save,” then click “Next.”
2. Education/Education History and References:
•Use the dropdown to enter your highest education level. Entering this information is required.
•Then, only college and university information is required. Click the plus sign to the left of the “Postsecondary Education” link to enter that information.
•For country, enter USA or click the hourglass to select another country.
•You can use the first day of the month wherever dates are required.
•Click the plus sign to the left of "References" to enter two professional references.
•After you enter your education information and references, click “Save,” then click “Next.”
3. How did you find out about us/how did you find out about the job?
•After you enter this information, click “Save,” then click “Next.”
4. Online Questionnaire/Application Questionnaire: Answer the questions requiring a yes or no response. After you answer them, click “Submit.” This leads you to the Submit Online Application page.
C – SUBMIT ONLINE APPLICATION
To apply for your selected job: When you reach the “Submit Online Application” page shown below, you must click “I agree to these terms” and then click the “Submit” button at the end of the screen. After you click “Submit,” then you will see this information at the top of your screen:
My Applications
Thank you for your interest in employment at the University of Baltimore. HR will process your application documents for the search committee’s consideration.
Note: This screen will also show additional information about the selection process and Office of Human Resources contact information.
Questions/Help
If you have trouble viewing our job postings or applying for the vacancy, contact ubhrcareers@ubalt.edu for assistance.
TO APPLY:
External applicants: Review the vacancy announcement at http://www.ubalt.edu/candidate_gateway/erecruit.html and click the external applicant link to apply.
Internal applicants (students taking classes at UB and current employees) with login and password for MyUB: use the internal applicant link, log into My UB, then click the “View or Apply for Job Positions” link on the left.
UB is an Equal Opportunity/Affirmative Action/ADA Compliant Employer & Title IX Institution.
- Never use the Internet Explorer “Back” and “Forward” arrows to navigate. You will lose the information you have submitted.
- To navigate between pages, use the “Next,” “Previous,” and “Return to Previous Page” buttons.
- Use the “Save” button to save your information so you can return to it later and complete your application. Using “Save” does not complete the process to apply for a job opening.
UB is an Equal Opportunity/Affirmative Action/ADA Compliant Employer & Title IX Institution.
The University of Baltimore ("UB" or "University") does not discriminate on the basis of sex, gender, race, religion, age, disability, national origin, ethnicity, sexual orientation, gender identity, or other legally protected characteristics in its programs, activities or employment practices.