Senior Director Information Technology Security and Privacy

Job Description

  • Job code: 008991
  • Pay grade: J
  • Pay type: Exempt/salaried

General summary

Ensures the security and privacy of the University’s information technology resources.

Major duties

  • Develops, documents and promotes policies and standards to ensure the security of the University’s information technology resources and the privacy of confidential data.
  • Participates in the product review process to evaluate compliance with security standards.
  • Provides technical expertise to University groups working to mitigate risks to the University’s information technology resources.
  • Monitors and reports trends in security and compliance breaches.
  • Hires, trains and evaluates performance of staff.
  • Participates in the information technology strategic planning activities.

Minimum qualifications

Minimum qualifications based upon job documentation and industry best practices. Any current employees not meeting these qualifications will be grandfathered until they move to a different job.

Required education

  • Bachelor’s degree in a related field from an accredited institution, or Bachelor’s degree in a non-related field from an accredited institution combined with relevant experience.

Required experience

  • Five years’ relevant experience.
  • Supervisor or lead experience.
  • Strong interpersonal, written and verbal communication skills.
  • Knowledge of security and privacy regulations.
  • Experience managing vendors or consultants.
  • Experience developing security policies and procedures.

Physical requirements

Office or other indoor work with minimal physical demands such as occasionally lifting or moving materials less than 25 pounds.

Working conditions

Work is generally performed in a well-lit, temperature-controlled indoor environment with occasional exposure to the outdoors or any number of elements.

Revised: 2019-07-01

This description indicates the general nature and level of work performed by employees in the above job. It is not intended to be a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to the job.