Job Posting for District Director - Information Security at Tarrant County College

F005828 Position Status Full Time Assignment Length This field only applies to Faculty Grant Funded No Category APT Class Code 11 Starting Pay Commensurate with education and experience. Special Note Location District Department DT Chief Technology Officer Job Summary

Reporting to the Chief Information Officer, the District Director of Information Security is responsible and accountable for implementing and monitoring the Colleges’ information security and privacy programs. The incumbent must be customer-oriented and adept at working with IT and other College personnel and leaders to strike an optimal balance between security strategies and other priorities to successfully manage reasonably foreseeable internal and external threats to all information assets (electronic, paper and people) across the college. This role requires an engaging, imaginative, communicative, and collaborative leader, and serves as the college’s Information Security Officer in accordance with Texas Government Code § 2054.136.

Primary Duties and Responsibilities

Essential Performance Requirements*

Ensures the college’s compliance with Texas Government Code § 2054.133, and serves as the primary liaison with legal and regulatory bodies on issues related to information security, ensuring compliance with all relevant laws and regulations; completes all duties as assigned and required by Texas Government Code § 2054.136
Notifies the Chancellor, the Chief Information Officer, and applicable college administrators of risk-related breaches, discoveries, or noncompliance with state requirements promptly and accurately
Collaborates with college administrators to develop and maintain a college-wide information security plan, security policies, and procedures that address the requirements of state statute and the college’s information security and privacy risks
Partners with the college-community to ensure that controls are utilized to address all applicable requirements of state statute and the college’s information security risks
Develops and provides training and direction of college personnel with significant responsibilities for information security with respect to such responsibilities by developing education and awareness programs and advising operating units on security and privacy issues, best practices, and vulnerabilities
Partners with IT colleagues in a collaborative manner to address concerns and work through security-related challenges and projects
Provides guidance and assistance to senior college officials, information-owners, information custodians, and end users concerning their responsibilities under state statute, regulations, policies, and procedures
Collaborates with college administrators to develop and manage an incident response plan and team to lead efforts in the event of a security breach, including investigation, mitigation, and coordination with internal and external stakeholders, ensuring:
- Risk assessments are performed by the information owners and supported by the information-custodians at least biennially for systems containing confidential data and periodically for systems containing college sensitive or public data; and
- Security assessments are conducted biennially for systems containing confidential data and periodically for systems containing college sensitive or public data
Reviews the college’s inventory of information systems and related ownership and responsibilities
Recommends and collaborates with college administrators to establish policies, procedures, and practices to ensure the security of information and information resources against unauthorized or accidental modification, destruction, access, exposure, or disclosure
Coordinates the review of security requirements and specifications, verifies security requirements are identified, and risk mitigation plans are developed, contractually agreed, and obligated prior to the acquisition of new information systems and/or related services and applications
Verifies security requirements are identified and risk mitigation plans are developed and implemented prior to the deployment of internally-developed information systems and/or related applications or services
Reports regularly, at least annually, to the Chancellor and the CIO the status and effectiveness of the security program and its controls

General Supervision and Management

Provides coaching and performance management leadership for assigned personnel
Ensures direct reports complete required compliance training annually according to college-wide deadlines
Leads and holds assigned personnel accountable for adhering to college policies, procedures, goals, and objectives

Service Excellence

Participates on behalf of the College in external community organizations and associations as assigned to support the essential performance requirements
Attends the workplace regularly, reports to work punctually, and follows a work schedule to keep up with the demands of the worksite
Completes all required training and professional development sessions sponsored through Tarrant County College (TCC)
Supports the values of the College: diversity, teaching excellence, student success, innovation, creativity, and service to the College
Supports the mission, values, goals, and principles of the College

Supervision
Works under the general supervision of the Chief Information Officer

Performs Other Related Tasks as Required

The duties listed are intended only as illustrations of the various types of work that may be performed. The omission of specific statements of duties does not exclude them from the position if the work is similar, related or a logical assignment to the position. The job description does not constitute an employment agreement between the employer and employee and is subject to change by the employer as the needs of the employer and requirements of the job change.

Required Minimum Qualifications

Bachelor’s degree
Seven (7) years’ working experience related to the essential performance requirements
Three (3) years’ working experience supervising (e.g., managing and evaluating the performance of others)
Certified Information Systems Security Professional (CISSP)

Preferred Qualifications

Certified Information Security Manager CISM, GIAC Security Essentials GSEC, or other recognized Security Certification
Experience implementing Federal, State and industry security standards such as the Texas Administrative Codes 202.70-77, NIST 800-53 & 800-171, Graham-Leach-Bliley Act (GLBA) Safeguards Rules in a higher education environment

Knowledge, Skills and Abilities

Knowledge of local, State (especially Texas Government Code § 2054.136), and Federal laws and regulations relevant to information security, privacy, and computer crime; the principles and practices of public administration and management; the limitations and capabilities of computer systems; technology across all network layers and computer platforms; and operational support of networks, operating systems, Internet technologies, databases, and security applications
Knowledge of information security frameworks (e.g., NIST, ISO 27001), technology environments, applications, and networking
Knowledge of legal and regulatory implications of data breaches
Knowledge of applicable practices and laws associated with data privacy and protection
Skilled in security incident management and risk assessment including research, analysis and problem solving, especially for evaluating security threats and trends
Skilled in excellent interpersonal communication and customer service with diverse populations
Skilled using computer applications and enterprise systems, including security tools and software, word processing, spreadsheet, and presentation software
Skilled in formulating and updating security policies and procedures
Ability to organize and prioritize tasks effectively and efficiently in a high-pressure environment
Ability to make prompt decisions in response to security incidents and to think critically to effectively solve and communicate problems in a fast-paced environment where demands for work are varied and unpredictable in scope and volume
Ability to educate and train staff on security protocols
Ability to work effectively in a collaborative environment and a setting that is diverse and urban
Ability to delegate work appropriately to meet College and campus deliverables
Ability to direct and organize program activities; to identify problems, evaluate alternative, and implement effective solutions; to develop and evaluate policies and procedures; to prepare reports; to resolve advanced security issues in diverse and decentralized environments; to communicate effectively; and to supervise the work of others

Accommodations

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential duties and responsibilities.

Special Instructions Summary Posted 04/10/2024

Posting Contact Summary

Should you have questions specific to this position please contact the following individual

Contact

HR Talent Acquisition

hrtalentacquisition@tccd.edu

Apply for this job

Receive alerts for other District Director - Information Security job openings

Salary.com Estimation for District Director - Information Security in Fort Worth, TX

$162,999 to $213,022

District Director - Information Security

Job Posting for District Director - Information Security at Tarrant County College

Sign up to receive alerts about other jobs that are on the District Director - Information Security career path.

Sign up to receive alerts about other jobs with skills like those required for the District Director - Information Security.

Job openings at Tarrant County College

Not the job you're looking for? Here are some other District Director - Information Security jobs in the Fort Worth, TX area that may be a better fit.

We don't have any other District Director - Information Security jobs in the Fort Worth, TX area right now.