Supervising Programmer/Analyst

ITEC’s External Security Services Information Security Officer (ESISO) provides strategic cybersecurity leadership and advisory services to higher education institutions. The role focuses on assessing and implementing security strategies, policies, and frameworks aligned with the unique needs of universities and colleges, while helping manage cyber risk, regulatory compliance, and protection of academic, research, and administrative data. The ESISO serves as a trusted security advisor and advocate to campus and ITEC senior management, clearly communicating risks, priorities, and recommendations in business-relevant terms. The position requires a strong understanding of information security programs within complex U.S. organizations, including higher education, SUNY, and New York State government environments. With team leadership and security program management as core responsibilities, the role also carries a strong project management focus, coordinating deliverables with the Security Services Service Delivery Manager. The ESISO helps define, oversee, and contribute to approved campus security projects. The role also supports campuses during security incidents and advises on security-focused software, system requirements, compliance (e.g., GLBA, PCI, FERPA, HIPAA) and appropriate hardware and software configurations., + Buffalo State website

• Buffalo News
• Buffalo Rocket
• Challenger
• Chronicle of Higher Education
• HigherEdJobs
• Panorama Hispano News
• Employee Referral
• Other 2. * All applicants are subject to a pre-employment background investigation. The college’s Pre-Employment Background Screening Policy is available at http://hr.buffalostate.edu/pre-employment-background-screening. Prior to an offer of employment, an applicant will be required to sign an authorization release form, allowing Buffalo State to conduct a background investigation. Failure of an applicant to sign the authorization release form will disqualify an applicant from further consideration for appointment.
• I agree to comply with the college’s policy.
• I do not agree to comply with the college’s policy. (Note, this selection will disqualify you from further consideration for appointment.) 3. * Do you have a bachelor’s degree in a security, computing, programming, networking or related field, and progressive relevant professional work experience?
• Yes
• No 4. * Do you have demonstrated familiarity with compliance requirements (e.g., PCI, GLBA, FERPA) and NIST Cybersecurity Framework (CSF) or equivalents?
• Yes
• No

Documents Needed to Apply

Required Documents

1. Resume / Curriculum Vitae
2. Cover Letter
3. Names and Contact Information for 3 Professional References

Optional Documents

1. A bachelor’s degree in a security, computing, programming, networking or related field, and progressive relevant professional work experience..
2. Good presentation skills, interpersonal skills, written and communication skills.
3. Demonstrated familiarity with compliance requirements (e.g., PCI, GLBA, FERPA) and NIST Cybersecurity Framework (CSF) or equivalents.
4. Demonstrated familiarity with creating and implementing security policies, risk assessments and tabletop exercises.
5. Demonstrated familiarity with Incident Response (IR) and creating IR Plans.

Preferred Qualifications

1. Master’s degree in information security or assurance, such as MSIA, or Certifications related to Security Operations/Architecture/Engineering: ISC2: CISM, CISSP or SSCP.(CISSP-ISSAP or ISSEPa plus); relevant SANS GIAC series; or others, like PNPT, OSCP, CEH, CISA, or CySA+.
2. Familiarity with Security Tools such as Zeek, Snort, Suricata, Nmap, Metasploit, Wireshark, OpenVAS, Autopsy, etc.
3. Working or managerial experience in a large organization, especially higher education.
4. Recent operational or administrative experience with EDR, SIEM, IDS/IPS Systems or Zero Trust Networks.
5. Experience responding to or advising the response to a security breach, such as notification, chain of custody, guiding forensics, or compliance reporting.
6. Experience in System Administration for Windows servers, vCenter/ESXi, Linux, Hypervisors, Networking Infrastructure a plus.
7. Cloud provider experience and/or certifications with any of Azure, AWS, Google Cloud.
8. Membership in REN-ISAC, MS-ISAC, or other industry ISAC.

Buffalo State is one of the largest comprehensive schools in the State University of New York system. As a civically minded, urban-engaged campus community located in the city’s cultural corridor, Buffalo State prides itself as having smaller learning environments coupled with larger university opportunities. Boasting a diverse and inclusive campus, Buffalo State is committed to the intellectual, personal, and professional growth of its students, faculty, staff, and alumni. The school’s mission is to deliver a broad array of high-quality and distinctive academic programs infused with diversity, creativity, and hands-on learning opportunities for hardworking students who seek a personalized and affordable education that engages their minds and advances their careers. Buffalo State is dedicated to excellence in teaching, research, service, scholarship, creative activity, and cultural enrichment. With degree programs in education, the arts, science, arts and humanities, and professional studies, each year over 6,000 students choose Buffalo State. Buffalo State welcomes applicants who are committed to helping us fulfill our mission. Faculty/Professional Professional