Deputy Chief Information Officer, Chief Information Security & Privacy Officer

Deputy Chief Information Officer, Chief Information Security & Privacy Officer Office of the Chief Information Officer, The University of Illinois Urbana-Champaign seeks an exceptional Chief Information Security and Privacy Officer to provide campus-wide leadership for a comprehensive cybersecurity, identity and access management, and privacy program that supports the university’s academic, research, and administrative missions. The ideal candidate is a strategic, collaborative leader with deep experience in cybersecurity and risk management, proven ability to guide policy and governance in a complex environment, and a deep commitment to operational excellence. This individual will set multiyear roadmaps, lead institutional incident response, partner closely with university counsel and campus leadership, and ensure compliance with evolving regulatory requirements for a major Research 1 institution. Candidates should bring substantial management experience; demonstrated success communicating with both technical and non-technical audiences; and the judgment, integrity, and relationship-building skills required to advance a resilient, forward-looking security posture for the university. Hybrid work options may be available for this position, with the ability to be on-site at the University of Illinois Urbana-Champaign campus as needed per the University’s Workplace Flexibility policy. Sponsorship for work authorization is not available for this position.

Why Work at Technology Services?

Highlights of Employee Benefits

Job SummaryThe Chief Information Security and Privacy Officer (CISO/PO) provides institution-wide leadership in developing and implementing comprehensive strategies for information security and privacy at the University of Illinois Urbana-Champaign. This executive role supports academic, research, and administrative functions while ensuring compliance with applicable laws, regulations, policies, and industry best practices. Duties & Responsibilities

University & Program Leadership

• Prioritize privacy and security risk management in alignment with institutional risk frameworks and institutional missions.
• Lead the development of multi-year roadmaps for information security, identity and access management, and privacy across on-premise, cloud, and third-party platforms.
• Serve as the primary institutional advocate for privacy, promoting awareness and integration of privacy principles into technology, processes, and training.
• Advise university counsel, senior leadership, and stakeholders on information security and privacy matters.
• Direct the Identity, Privacy, and Cybersecurity group, including budget oversight and personnel management.
• Collaborate with other Technology Services groups and staff to enhance risk mitigation strategies.
• Support strategic planning and ensure alignment with organizational goals.
• Partner with university leaders, governance bodies, and technologists to strengthen foundational IT capabilities through strategic investments and resource planning.
• Supervises and supports staff through regular guidance, coaching, and performance management to ensure quality service and operational excellence.
• Travel may be required.

Risk Management & Incident Response

• Oversee and mature risk management processes across the university and the University of Illinois System.
• Lead campus-wide information security and privacy incident response programs.
• Serve as the official point of contact for security incidents, including coordination with law enforcement.
• Collaborate with university counsel and System leadership on policy violations and external complaints.
• Monitor compliance with privacy laws and regulations including FERPA, HIPAA, GDPR, and institutional policies.
• Maintain awareness of emerging threats and develop strategies to mitigate their impact on university operations.

Institutional Compliance & Policy

• Lead the development and maintenance of institutional policies, standards, and procedures related to information security and privacy.
• Ensure policies reflect current legislation and regulatory requirements relevant to a Research 1 institution.

1. Bachelors degree.
2. Ten years of professional experience in IT, IT administration, or risk management, with significant responsibility in cybersecurity/information security.
3. Five years of management experience in information technology.
4. Demonstrated experience leading organization-wide initiatives.
5. Demonstrated experience in budgetary and programmatic planning.
6. Demonstrated experience managing complex, cross-organizational initiatives.
7. Leadership experience in information security.

Preferred Qualifications

1. Advanced degree in information technology, information security, privacy, or a related field.
2. Five years of experience in one or more domains of information security or privacy.
3. Leadership experience in a complex institution encompassing teaching, research, or administration.
4. Demonstrated commitment to diversity, equity, and inclusion in service delivery.
5. Professional certifications such as CISSP, CRISC, CISM, CIPP/US, or CIPM.

Knowledge, Skills and Abilities

• Demonstrated ability to maintain high security/privacy controls when dealing with sensitive information.
• Strong communication and interpersonal skills to communicate effectively with all levels of campus community, both verbally and in writing.
• Strong knowledge of institutional funding, financial management, and budgeting within a complex IT environment.
• Highly developed standards of professional conduct and customer service including, but not limited to: accountability, acceptance of new challenges and responsibilities, and a focus on customer needs and prompt, accurate resolution of issues.
• Demonstrated ability to lead and mentor staff, set priorities, and oversee cybersecurity needs across campus.
• Understanding of privacy management programs.

This is a 100% full-time Academic Professional position, appointed on a 12-month basis. The expected start date is as soon as possible after the closing date. The budgeted salary range for the position is $210,000 to $265,000. Salary is commensurate with experience. Hybrid work options may be available for this position, with the ability to be on-site at the University of Illinois Urbana-Champaign campus as needed per the University’s Workplace Flexibility policy. Sponsorship for work authorization is not available for this position. Application Procedures & Deadline Information, This position is intended to be eligible for benefits. This includes Health, Dental, Vision, Life Insurance, a Retirement Plan, Paid time Off, and Tuition waivers for employees and dependents.

This position is intended to be eligible for benefits. This includes Health, Dental, Vision, Life Insurance, a Retirement Plan, Paid time Off, and Tuition waivers for employees and dependents.

At the University of Illinois Urbana-Champaign - the state’s flagship public university and one of the world’s leading research institutions - every staff member helps shape what’s next. Founded in 1867, Illinois is home to a vibrant community of 59,000 students from all 50 states and 129 countries, supported by 15 colleges and instructional units, more than 20 research institutes, and one of the most comprehensive student service ecosystems in the nation. Whether you’re empowering first-generation students, fueling breakthrough innovation, or strengthening communities across Illinois and beyond, your work here has a far-reaching and deeply meaningful impact. The university offers a highly competitive benefits package designed to support your well-being, growth, and financial security. Join a top 10 public university that has launched over 330 startups and continues to redefine excellence - where the Illinois Value Proposition ensures that your contributions are recognized, your potential is nurtured, and your career can thrive.

Champaign-Urbana