> Markdown version of [/jobs/ext/561811-information-security-officer](https://www.wearedevelopers.com/jobs/ext/561811-information-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Officer - **Company:** Union College - **Location:** Schenectady, NY, United States - **Experience:** Expert - **Salary:** $95,000.0 - $100,000.0 - **Contract:** Permanent contract - **Skills:** Access Network, Authentication Protocols, Cyber Security, Computer Networks, Virtual Private Networks (VPN), Network Security, Security Software, Security Information and Event Management, IT Architecture, Information Technology, Firewall Services Module, Vulnerability Analysis - **Published:** June 16, 2026 - **Apply:** https://www.juju.com/job/00000000g8ot8d ## About the Role + Bachelor's degree or the equivalent in education and experience or a combination of relevant education, training, certifications, and work experience . + Minimum five years of relevant experience in information security or related field. + Experience working in higher education preferred. + Experience presenting complex security concepts to a variety of audiences or groups (e.g. end-user training, security conference presentations, executive-level briefings). + Familiarity with information security and data breach law, standards; and federal, state, and local regulations including PCI, FERPA, HIPAA, and NIST 800 series. + Knowledge of network and authentication protocols, encryption types, and information security technologies. + Experience with data networking, VPN, next-generation firewalls, network access controls, security information and event management (SIEM), authentication protocols, data encryption, and other relevant technologies CISSP, GIAC or similar certification(s) preferred. + Ability to work independently and as a member of a team, establish priorities, and work collaboratively as a member of a diverse community. + Collaborative, constructive, and positive approach to work. + Excellent oral, written, and interpersonal communication skills, including strong relationship skills. + Attention to detail in both completion of work and documenting work products. + Effective time management practices, applied in a fast-paced environment ## Description Reporting to the chief information officer (CIO), the Information Security Officer (ISO) is responsible for the strategic and operational direction of Union's information security program. The ISO works collaboratively with campus leadership and stakeholder groups to build shared ownership of information security across the institution. The position develops and maintains programs including information security policy and standards; information security awareness and training; information security incident response and management; risk assessment and management; and information security-related information technology (IT) architecture. The ISO demonstrates a commitment to ensure that data in all forms, as well as the systems and networks used to transmit, store, and provide access to it are designed, configured, and operated in a manner that ensures security, integrity, privacy, and compliance with statutory and regulatory requirements., Position Purpose: Reporting to the chief information officer (CIO), the Information Security Officer (ISO) is responsible for the strategic and operational direction of Union's information security program. The ISO works collaboratively with campus leadership and stakeholder groups to build shared ownership of information security across the institution. The position develops and maintains programs including information security policy and standards; information security awareness and training; information security incident response and management; risk assessment and management; and information security-related information technology (IT) architecture. The ISO demonstrates a commitment to ensure that data in all forms, as well as the systems and networks used to transmit, store, and provide access to it are designed, configured, and operated in a manner that ensures security, integrity, privacy, and compliance with statutory and regulatory requirements. Essential Responsibilities and Duties: + Coordinate the College's information security program. + Establish and maintain information security programs in collaboration with the campus community including policy and standards. + Provide information security awareness and training; incident response and management; risk assessment and management; and relevant IT architecture to ensure the security of all sensitive data collected, processed, stored, and transmitted. + Develop and maintain the campus information security roadmap for ensuring the security of technology services, computer systems, data networks, and data. + Conduct and review ongoing vulnerability assessments of IT systems and coordinate periodic information security assessments at an organizational level. + Develop, maintain, and review security configuration data in security software and/or services. + Approve, review and audit firewall rules maintained by the network managed service vendor. + In collaboration with network managed service vendor, inspect system, network log, and event data for integrity and anomalies when necessary. + As a member of the ITS management team, participate in strategic planning and development of goals and objectives. + Collaborate with ITS staff to track and implement information security initiatives. + Facilitate the communication of policies, practices, and awareness to the College community. + Manage and coordinate incident response procedures to track and address information, system and network security incidents, alleged policy violations, and external requests or complaints. + Assist in vendor and/or product assessments to evaluate information security risks. + Perform additional duties as assigned; duties, responsibilities, and activities may change at any time with or without notice. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol) - [Architectures that we can use with .NET](https://www.wearedevelopers.com/videos/935-architectures-that-we-can-use-with-net) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [One Does Not Simply Make Architecture Decisions Alone](https://www.wearedevelopers.com/videos/2128-one-does-not-simply-make-architecture-decisions-alone) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)