Information Technology Security Operations Manager

The University Information and Technology (UIT) Office is seeking an Information Technology Security Operations Manager. This is a full-time (1.00 FTE), 12-month, professional faculty position.
As a division within the Office of Information Security, IT Security Operations provides services to ensure the confidentiality, integrity and availability of Oregon State University IT systems, data and information. The IT Security Operations Manager reports to the OSU Chief Information Security Officer and leads a team of employees and students to provide cybersecurity event monitoring and detection, incident response and information security investigation support to the Oregon State University community.
The IT Security Operations Manager performs a highly sensitive function for the institution and must exercise independent judgment and discretion in fulling the role. The IT Security Operations Manager performs the role under the guidance of the CISO and must be able to respond to an evolving threat environment rapidly within established OSU policy. The IT Security Operations Manager is responsible for the development and operation of the OSU Security Operations Center (SOC), which includes training, standard operational procedures and requirement development. Provides professional mentoring and workforce development to OSU Security Operations Center employees and students. The OSU Security Operations Center integrates into IT operations organizations across the university, in order to coordinate an effective and responsive Security Operations service. The IT Security Operations Manager must develop effective relationships with University IT Service Directors and Distributed IT Directors in order to support the delivery of the Security Operations Service.
The IT Security Operations Manager supports sensitive information security investigations, involving human resources, research misconduct or other matters requiring a high degree of discretion. The IT Security Operations Manager will often serve as a Cybersecurity Incident Commander, and must be skilled at coordinating with Oregon State University stakeholders as well as external entities, such as law enforcement, to contain incidents and facilitate rapid recovery. The IT Security Operations Manager makes liaison with other cybersecurity operations and coordination organizations at the local, state and national level to improve OSU’s cybersecurity expertise and ability to respond to events.
UIT has a deep commitment to and belief in the strength and value of diversity, equity, and inclusion, both throughout our team and as an intentional and active practice to advance the vision, mission and strategic efforts of the entire university. As a member of the UIT community, the person in this position is expected to foster and promote the values of diversity, equity, and inclusion and demonstrate a commitment to inclusive excellence in their work.
Proactively securing and protecting OSU’s digital assets and information systems is crucial to our missions of teaching and learning, research, and extension and engagement. All OSU IT professionals are directly responsible for providing high-quality and secure IT systems and services. Persons in technology roles are expected to be responsive to security-related actions and requirements, and to collaboratively find secure ways to support the OSU community.
UIT commits to deliver data as a strategic institutional asset and to enable data-informed decision-making across OSU. UIT managers and staff lead by example and use data to make informed decisions at all levels in the organization. Persons in technology roles are also expected to design systems with data portability in mind and work within enterprise architecture and privacy guidelines.

Working for Oregon State University is so much more than a job!
Oregon State University is a dynamic community of dreamers, doers, problem-solvers and change-makers. We don’t wait for challenges to present themselves — we seek them out and take them on. We welcome students, faculty and staff from every background and perspective into a community where everyone feels seen and heard. We have deep-rooted mindfulness for the natural world and all who depend on it, and together, we apply knowledge, tools and skills to build a better future for all.
FACTS:

• 7 cultural resource centers that offer education, celebration and belonging for everyone
• For more interesting facts about OSU visit: https://oregonstate.edu/about
• More research funding than all public universities in Oregon combined
• 35k+ students including more than 2.3k international students and 10k students of color
• 217k+ alumni worldwide
• 100+ undergraduate degree programs, 80+ graduate degrees plus hundreds of minor options and certificates
• Top 1.4% university in the world
• 2 campuses, 11 colleges, 12 experiment stations, and Extension programs in all 36 counties
• 1 of 3 land, sea, space and sun grant universities in the U.S.

Locations:
Oregon State has a statewide presence with campuses in Corvallis and Bend, the OSU Portland Center and the Hatfield Marine Science Center on the Pacific Coast in Newport.
Oregon State’s beautiful, historic and state-of-the-art main campus is located in one of America’s best college towns. Corvallis is located close to the Pacific Ocean, the Cascade mountains and Oregon wine county. Nestled in the heart of the Willamette Valley, this beautiful city offers miles of mountain biking and hiking trails, a river perfect for boating or kayaking and an eclectic downtown featuring local cuisine, popular events and performances.
Total Rewards Package:
Oregon State University offers a comprehensive benefits package with benefits eligible positions that is designed to meet the needs of employees and their families including:

• Robust Work Life programs including Dual Career assistance resources, flexible work arrangements, a Family Resource Center, Affinity Groups and an Employee Assistance Program.
• Medical, Dental, Vision and Basic Life. OSU pays 95% of premiums for you and your eligible dependents.
• Retirement savings paid by the university.
• Tuition reduction benefits for you or your qualifying dependents at OSU or the additional six Oregon Public Universities.
• A generous paid leave package, including holidays, vacation and sick leave.

Future and current OSU employees can use the Benefits Calculator to learn more about the full value of the benefits provided at OSU.

50%—OPERATIONAL CYBERSECURITY MANAGEMENT:
Provide cybersecurity services to address institutional risk and compliance requirements. Services include, but are not limited to:
—Integrated cybersecurity services for Oregon State University. Develop, test, maintain and improve operational procedures for cybersecurity processes and activities for the institution. Integrate the cybersecurity function with IT operations groups at OSU, develop strong relationships and operational processes to proactively address risk and when necessary, ensure effective incident response measures are taken.
—OSU Security Operations Center. Provide primary cybersecurity monitoring, detection and incident response services to the Oregon State University community. Lead and develop staff, including student workers, assigned to the OSU Security Operations Center. Determine appropriate monitoring and detection strategies to ensure the confidentiality, integrity
and availability of systems, data and information within the OSU Community. Provide incident response capability for the OSU Community, and be prepared to act as Incident Commander for cybersecurity events. Develop and provide cybersecurity threat analysis and alerting services for the OSU Community.
—OSU Community-wide Vulnerability Threat Assessment. Provide and manage the OSU vulnerability scanning service. Support the Governance, Risk and Compliance Manger with enterprise-wide vulnerability detection and reporting to manage risk to OSU systems, data and information. Provide risk assessment of detected vulnerabilities to assist leadership in risk management.
—Cybersecurity Forensics. Provide and develop cybersecurity forensics services to support cybersecurity incident response and/or investigation requirements.
30%—OSU SECURITY OPERATIONS CENTER PROGRAM MANAGEMENT:
Recruit, train, mentor and manage the OSU Security Operations Center workforce. Produce individual development programs for employees and develop and document functions and roles within the OSU Security Operations Center. Develop appropriate methods and opportunities for student workers to reinforce the OSU Security Operations Center mission and provide valuable experiential learning. Plan and implement new cybersecurity service offerings and develop sustainment plans for existing services. Coordinate with the OSU Community to determine operational cybersecurity requirements and develop approaches to meet the need. Perform other supervisory responsibilities which may include but not limited to approve time and leave requests, prepare and signs performance evaluations, and responds to grievances.
15%—OPERATIONAL CYBERSECURITY LEADERSHIP:
Develop and maintain relationships within the OSU Community and with external partners. Ensure continuous improvement for the OSU IT Security Operations function. Develop and manage strong regional and national partnerships with cybersecurity organizations. Represent Oregon State University as appropriate in regional cybersecurity consortia, national organizations and statewide forums/boards/commissions. Serve as a member of the OIS Leadership team.
5%—OTHER DUTIES AS ASSIGNED.

This position is designated as a critical or security-sensitive position; therefore, the incumbent must successfully complete a criminal history check and be determined to be position qualified as per University Standard: 05-010 et seq. Incumbents are required to self-report convictions and those in youth programs may have additional criminal history checks every 24 months.

Standard office environment; occasional travel (10-25%) may be required. Work outside of standard hours may be required occasionally.