Director of Information Security

The Director of Information Security position is responsible for developing and executing information security controls and processes that support the academic, research, and administrative missions of the university in a timely and balanced manner. The Director will lead the Information Security Officer (ISO), oversee Information Assurance Specialists, and directly advise and report to the CIO. This role requires a cybersecurity leader with deep technical expertise, a collaborative mindset, and a strong understanding of the regulatory landscape and operational complexities in higher education. The Director will also be responsible for managing external audits at the direction and guidance from the Controller, including coordination with state auditors, the Office of Legislative Audits (OLA), and other external agencies, *Advise, develop and maintain a university-wide information security program aligned with institutional goals and regulatory standards (e.g., FERPA, HIPAA, GLBA, NIST, GDPR, CCPA). *Oversee the ISO and Information Assurance Specialists, ensuring effective execution of security operations and compliance initiatives. *Advise on the design and implementation of secure cloud infrastructure and zero-trust architecture using both open-source and commercial solutions. *Management and accountability for incident response planning and execution, including post-incident analysis and reporting. *Coordinate and support audits conducted by state agencies, the OLA, and external partners. *Develop, deliver and promote cybersecurity awareness initiatives across the university community. *Collaborate with academic, research, and administrative units to advise on secure and compliant use of technology and data. *Manage cybersecurity vendor relationships, and strategic investments in security technologies. *Support CIO with grant applications, research partnerships, and accreditation efforts by demonstrating strong cybersecurity postures., Equal opportunity of access to academic and related programs shall be extended to all persons. Bowie State University shall have as its firm objective equal opportunity in recruitment and hiring, rate of pay, all other promotions, training, retention and dismissals, for all employees and applicants for employment. The University will stress equal access for employees and applicants for employment to all programs and services provided by the University both on and off campus. The University will also provide equal opportunity and an atmosphere of nondiscrimination with respect to women and members of minority groups in all its operations. In addition, the University shall promote equal opportunity and equal treatment through a positive and continuing Affirmative Action Program.

The University makes, and will continue to make, reasonable accommodations to promote the employment of qualified individuals with disabilities and disabled veterans, unless such accommodations would impose an undue hardship on the University’s business.

In addition, employees and applicants will not be subjected to harassment, intimidation, threats, coercion, or discrimination because they have engaged in, or may have engaged in, activities such as filing a complaint, assisting or participating in an investigation, compliance review or hearing, or opposing any act or practice made unlawful, or exercising any other right protected by Section 503 of the Rehabilitation Act of 1973, as amended or the Vietnam Era Veterans Readjustment Assistance Act of 1974, as amended.

*Bachelors degree in computer science or related field. *10+ years of progressive experience in cybersecurity leadership, preferably in higher education, government, or large organizations. *Proven success in building and leading cybersecurity programs in complex, hybrid environments. *Experience with modernization efforts, including cloud-native security tools, real-time asset inventories, and automation. *Expertise in compliance frameworks (e.g., NIST, ISO 27001, SOC 2). *Strong knowledge of privacy regulations such as GDPR, CCPA, and other global/domestic data protection laws. *CISSP certification required.

PREFERRED QUALIFICATIONS: *Advanced degree in Cybersecurity, Computer Science, or a related field (MS preferred). *Experience with federally protected data and academic research security. *Familiarity with student data privacy and IT governance in higher education.