Associate Vice President, Information Security

GW IT is the chief provider of technology infrastructure, services and applications at the George Washington University. The division partners with stakeholders across GW to equip students, staff and faculty with the technology know-how and tools necessary to achieve academic excellence. GW IT serves as a trusted technology partner with the university, evaluating and delivering innovative and collaborative technology solutions that promote and advance teaching, learning research and support for the GW community.

This top level information security role directs the institution’s information technology (IT) security policy and operations, and oversees ownership of the institution’s IT security policies, including IT security training. This role is responsible for risk management, information security policy compliance and operations, information security awareness, program development, and overall coordination of all aspects of information security. This role has high visibility reporting to the top IT officer, and also receives direction from the top finance officer and the Board of Directors. This is an executive position at the university that, in addition to leading a major function at the organization, has enterprise-wide scope and leads and manages the staff of the unit to strategically accomplish university goals.

The visibility and value of technology and cybersecurity has increased significantly over recent years, and will continue to do so. The University has embarked on an aggressive modernization and culture transformation journey. This is an exciting time to be in IT in higher education as we have a dedicated team of IT professionals. Not only do we invest in professional and leadership development as an organizational priority but the team and this role are trusted and respected by the user community. As such, an ideal candidate will possess the following;

Experience leading the development and management of information security programs and related policies, standards, and guidelines including incident response and eDiscovery.

She/he will also have experience with formulating communication of information security, and risk standards and methodology to staff working on varied analytical, engineering, or systems integration projects.

As a member of the CIO’s leadership team, effectively build a security-integrated technology strategy aligned with the University’s Strategic Initiatives.

Lead, recruit, and retain a diverse team of information security professionals.

Position this role as an adviser and advocate for digital innovation, rather than as a barrier.

Collaborate with internal and external partners and establish mutually beneficial partnerships to embrace and advance digital transformation with confidence.

Establish an overarching security framework developed through risk modeling, rather than address risk as part of the near-term cost benefit analysis of particular projects.

Pursue opportunities to automate and orchestrate IT processes that can have a positive impact on operations, security, and the constituent experience, as well as increase efficiency and speed to remediation.

The position is based at GW’s campus in Ashburn, VA, the University’s flagship research and technology center, strategically positioned in the Northern Virginia technology corridor. The position will require frequent travel to GW’s Foggy Bottom campus in Washington, DC.

Performs other related duties as assigned. The omission of specific duties does not preclude the supervisor from assigning duties that are logically related to the position.

Minimum Qualifications:

Qualified candidates will hold a Bachelor’s degree in an appropriate area of specialization plus 10 years of relevant professional experience, or, a Master’s degree in a relevant area of study plus 8 years of relevant professional experience. Relevant experience must include at least 4 years of senior leadership/executive level experience. Degree must be conferred by the start date of the position. Degree requirements may be substituted with an equivalent combination of education, training and experience.

Additional Required Licenses/Certifications/Posting Specific Minimum Qualifications: Preferred Qualifications:

A proven track record of success in managing a team of IT professionals in
addition to possessing a reputation for leadership.

Experience partnering with Human Resources, Legal, Risk Management, and other business functions as well as outside consultants and auditors on processes and issues that relate to information security, risk management, security awareness and protection of critical information assets.

Experience leading the development and management of information security programs and related policies, standards, and guidelines including incident response and eDiscovery.

Experience with providing periodic Information Security Program status reports to senior management as appropriate.

Experience with formulating communication of information security, and risk standards and methodology to staff working on varied analytical, engineering, or systems integration projects.

Experience with assessing the progress of IT projects by reviewing reports against communicated security, compliance and risk standards and methodology.

Typical Hiring Range Commensurate with Experience How is pay for new employees determined at GW?