Information Technology Security Manager

Job ID: 12673
Location: Bellevue College
Full/Part Time: Full Time
Regular/Temporary: Regular
Position Summary
Under the direction of the Information Technology Services (ITS) Vice-President (ITS-VP), the Information Technology Security Manager (ITSM) assists with the management, coordination and oversight managing the college Information Security program.
The ITSM is an expert-level specialist, with primary oversight for technology security compliance. Working independently under minimal supervision, this includes coordinating overall information security and management activities with campus technical support personnel, and acting as a direct expert-level advisor and consultant to the ITS-VP and other college administrators, staff and faculty with regard to information security, regulatory compliance, and other related security, data privacy and related technology matters.
Pay, Benefits & Work Schedule
Position Salary Range: $106,586/year - $159,880/year.
The salary will be determined based on candidate's qualifications and related experience. Typically, new hire starts no higher than $119,883/year based on Bellevue College Exempt salary schedule.
We offer comprehensive compensation package with salary and benefits as the main components. Generous benefits package is offered through Washington State plans that includes multiple medical, dental, life and disability coverage choices for employees and dependents; choices of retirement and deferred compensation plans; paid holidays, sick, and vacation plans; transit program, reduced tuition, employee discounts and memberships, etc.
The employee is scheduled to work 40 hours per workweek. This position is exempt from the overtime provisions of the Fair Labor Standards Act, which means that you are not eligible for overtime pay.
About The College
Bellevue College is a diverse student-centered, comprehensive and innovative college, committed to teaching excellence that advances the life-long educational development of its students while strengthening the economic, social and cultural life of its diverse community. Bellevue College is located just 10 miles east of Seattle where we serve a student population of over 54% students of color and over 1,300 international students. The college promotes student success by providing high-quality, flexible, accessible educational programs and services; advancing pluralism, inclusion and global awareness; and acting as a catalyst and collaborator for a vibrant region.
We strive to create a vibrant and inclusive campus community that supports a diverse student body, faculty and staff. As an essential part of our mission and goals , diversity, equity and pluralism are promoted and fostered in all aspects of college life. By enriching student life through leadership opportunities, personal learning and cultural experiences, we are committed to building an inclusive and diverse campus community that fosters creativity, innovation and student success.
For more information, visit BC Facts at a Glance @ Bellevue College .
About the Department
The Information Technology Services (ITS) division is comprised of six departmental teams: The Office of the Vice President, Digital Media Services, Infrastructure, Integration, Technical Support Services, and Office of IT Business Operation. ITS supports all campus computing - both academic and administrative. The division manages networking and server components, performance and quality of all college websites, the web portal, software and application development, as well as data and administrative system support. ITS provides in-person workshops and training to faculty and staff, and offers an array of video production services including live streaming campus events as well as producing original programming to support college activities. ITS broadcasts 24/7 programming for the College and outlying community on the College Channel television station.
Essential Functions
Compliance Management and Monitoring
Assist the Infrastructure group and other ITS technical support personnel in setting up, monitoring and enforcing college information security rules and procedures.
Ensure access to systems, storage of college data, and individual technology use complies with college data privacy requirements and the requirements of the information security policies and standards published by the Washington State, Office of the Chief Information Officer (OCIO) and other state agencies.
Set up, monitor, and enforce BC information security rules and procedures, instigating and managing adherence to security requirements set forth by federal, state and local laws and college policies, procedures and standard operating procedures.
Conduct hands-on technical security audits of the BC networks, information systems, user devices and related technology resources to support data security management and to ensure individual and institutional compliance with regulatory policies and security standards.
Assist college supervisors and units with regulatory compliance with local, state and federal technology requirements.
Prepare for and coordinate college and ITS responses for official state information security OCIO audits, including the annual review and reporting process.
Coordinate with the college Finance office to plan, implement and audit all BC networks subject to PCI compliance.
Work with college data governance stewards to meet Washington Privacy Act and GDPR data privacy expectations. This includes researching and developing recommendations for strategies the college may consider implementing based on the regulatory expectations.
Coordinate ITS compliance with BC records retention policies and procedures.
Information Security Program Management
Develop, maintain and review college information security policies, procedures and standard operating procedures (SOPs) which comprise the information security program.
Make policy interpretation and decisions.
Grant and document exceptions with cause.
Maintain written records and archives pertaining to the college information security program.
Ensure all issues related to information security are represented and addressed in the annual ITS work plans.
Support Technology Related to Information Security
Assist and advise technology system engineers with information security compliance, incident response, and security issue resolution.
Administer security permissions for approved access to systems, and troubleshoot and resolve authentication and authorization issues.
Provide system administrative support, management and troubleshooting for college information system resources and other mission-critical infrastructure-related systems.
Assist and advise college technical personnel in the provision, support and management of secure authorization and authentication processes providing access to college systems.
Troubleshoot and resolve complex computing problems related to information security.
Investigations
Conduct technical and records investigations in response to civil litigation, criminal and ethics investigations, and supervisory oversight, as directed by the ITS-VP and other campus authority.
Work closely with the college Records Officer and other authorized administrators in response to requests for the public disclosure of electronic college records related to data storage, computing system usage, and e-mail history.
Coordinate regarding information security matters with external units and entities, such as the college public safety office, the Title IX office, state auditor's office, state ethics board, and with local law enforcement.
Information Security Consultation
Consult with and advise campus users regarding information security
Act as security consultant for internal ITS managers and personnel with responsibility for creating, support and maintaining information security within their stewardship, such as the ITS Leadership Team, the Infrastructure unit, the Integration unit, the Technology Administration and Compliance unit, and the Technology Support Services unit.
Provide information security consultation and oversight for the whole campus, communicating about issues of information security and security planning-assisting and working closely at administrative levels with college administrators and supervisors to enforce information security policies, procedures and protocols.
Risk Management
Assess and document risk to the reliability, integrity and availability of protected college data shared with non-college vendors and entities outside of the college network and systems, using Data Sharing Agreements (DSA) or Confidentiality and Non-Disclosure Agreement (NDA), as well as other supporting documents.
Assist college technical support personnel with the identification of vulnerabilities and threats against assets resulting from the use of information systems at the college, evaluating potential adverse impacts and determining mitigation and reduction strategies.
Work with college administrators and managers to document the risks to and security of applications and services used to access, store or manipulate college data.
Assist in ITS Continuity-of-Operations planning, testing, assessment and execution, coordinating with campus entities responsible for the overall campus COOP.
Document formal written risk assessments and risk reviews.
Security Training
Provide information security training and information for both BC IT support personnel and general campus users.
Use both online and in person approaches to publicizing the security program and informing individuals with regard to information security policies, procedures, SOPs, current best practices, and their related individual responsibilities.
College Governance
Represent information security and ITS interests in various standing campus-level and state-level committees, including:
ITC IT Security Council
BC Risk Management Committee
BC Data Governance Committee
BC Institutional Review Board
Other
Perform other duties as assigned.
Minimum Qualifications
A Bachelor's degree in Information Technology, Information Management, or Information Security; or a minimum 3 years background, education and experience in information systems or security management, relevant years of experience can be substituted on a year-for-year basis.
Experience with information security technologies and technical processes in the areas of security incident prevention, evaluation, detection, resolution and remediation.
Expert level knowledge of technical and security issues regarding local and wide area networks, e-mail systems, virus scanning, continuity of operations, and audit best practices.
A technical understanding of application development practices, systems administration and networking, and current trends in information security and risk analysis.
Capable of composing written materials concisely, including policies, procedures, SOPs, and correspondence, all of which clearly articulate complex compliance requirements to both technical and non-technical audiences.
Position Specific Requirements
Able to communicate effectively and comfortably with individuals, and in any group, at all levels in the organization, including executive management.
Analytical skills demonstrating the ability to define, collect and analyze data, establish facts, draw valid conclusions, and make fact-based decisions.
Ability to identify key security issues quickly and the capacity to collaboratively develop effective strategic solutions that are feasible for the campus, while maintaining the integrity of the college's core mission and values.
Able to work successfully with a diverse group of staff, managers and administrators having primary responsibility for hands-on management of information security within the ITS units.
Proficient at working collaboratively with the disparate needs, skill levels and expectations of campus units and technology users outside ITS.
A commitment to establishing and maintaining a strong information security environment at the college, while preserving and supporting the primary, service-oriented functions of ITS and the college.
Preferred Qualifications
Any Information Technology and/or Information Security certifications
Understanding of federal, state and local legal and/or regulatory requirements for higher education as it applies to information security and data privacy.
Conditions of Employment
Bellevue College intends to provide a drug-free, healthy, safe, and secure work and educational environment. Each employee is expected to report to work in an appropriate mental and physical condition to perform her/his/their assigned duties.
Bellevue College employs only U.S. citizens and lawfully authorized non-U.S. citizens. All new employees must show employment eligibility verification as required by the U.S. Citizenship and Immigration Services.
Bellevue College requires all employees to be fully vaccinated and your vaccine status will be verified upon hire. Please reach out to the HR Office at [email protected] if you need information on medical or religious accommodation.
Sexual Misconduct and Background Check:
Prior to start of employment, finalists(s) for this position will be subject to a pre-employment background check as a condition of employment. Information from the background check will not necessarily preclude employment, but will be considered in determining the applicant's suitability and competence to perform in the position.
Applicants considered for this position will be required to disclose if they are the subject of any substantiated findings or current investigations related to sexual misconduct at their current employment and past employment. Disclosure is required under Washington State Law .
Check frequently in your inbox, spam, junk, clutter email folders for any communication regarding the next steps from Bellevue College and our background check partners.
Reference Check:
Reference checks may include, but are not limited to, contacting references and verification of work experience, and/or past job duties.
Other Information
This position is NOT eligible for relocation allowance.
This position is NOT eligible for sponsorship for employment-based visa.
How To Apply
Applications received by 06/01/2023 will be given full consideration. Applications received after that date may be considered until the position is filled.
All individuals interested in this position are encouraged to apply. Your application must include a complete online application and all of the required documents below to be considered complete. Any application that does not provide all requested information will not be considered for the position (only submit required documents with the application, additional documents will not be reviewed.) Please review Application Tips before applying. Current Bellevue College employees should apply the position through Employee Self Service.
Required application materials:
Attach a Cover Letter (min 1 pg., max 2 pgs.)
Attach a Resume
Attach a Diversity Statement (min 1 pg., max 2 pgs.) that addresses the following: Describe and provide specific examples of how your educational and/or professional experiences, background or philosophy demonstrate your commitment to diversity and equity, and how these prepare you to contribute to Bellevue College
Complete Job Questionnaires if applicable
Contact:
If you have questions with regards to the application or the hiring process, please contact Office of Human Resources at 425-564-2274 or email to [email protected] .
EEO Statement
Bellevue College does not discriminate on the basis of race, color, national origin, language, ethnicity, religion, veteran status, sex, sexual orientation, including gender identity or expression, disability, or age in its programs and activities. Please see policy 4150 at www.bellevuecollege.edu/policies/ . The following people have been designated to handle inquiries regarding non-discrimination policies: Title IX Coordinator, 425-564-2641, Office C227, and EEOC/504 Compliance Officer, 425-564-2178, Office B126.
Applicants with disabilities who require assistance with the recruitment process may contact [email protected] or 425-564-2271.