Information Security Manager 00680

Posting Details

Position Information

Working Title Information Security Manager 00680 Role Title Information Technology Specialist III Position Number 00680 FLSA Exempt Appointment Type Full Time Type of Posting General Public Is Sensitive Position? No If Sensitive Position, please paste statement Designated Personnel Yes Responsible Employee

This position is designated as a "responsible employee" who has the authority to redress sexual violence, who has the duty to report incidents of sexual violence or other student misconduct, or who a student could reasonably believe has this authority or duty.

If Designated Personnel, please paste statement

This position is a "designated position" meaning this position could potentially be required to work (depending on the event) during an emergency closing.

Statement of Economic Interest No If Statement of Economic Interest, please paste statement

Is this a restricted position subject to availability of funding? No If Restricted Position, please paste statement Departmental Objective

To inspire and foster partnerships that focus on innovative solutions for ubiquitous access and use of information services to support educational and cultural opportunities that benefit the CNU community.

Purpose of the Position

The Information Security Manager is responsible for managing and implementing an ecient and effective information systems security program that provides for the protection of the university's information assets.

Knowledge, Skills, and Abilities Related to Position

• Advanced knowledge of security best practices, Governance, Risk, and Compliance (GRC)
• Ability to align security strategies with business objectives to include defining and driving the security roadmap, policy framework, and architecture
• Ability to hire, train, and guide security engineers, analysts, and incident response personnel
• Detailed knowledge of Access Controls, the concept of Least Privilege, Security Policy, Security Procedures, and Separation of Duties
• Ability to implement and audit security controls
• Ability to manage vulnerability scanning tools and common vulnerability frameworks
• Knowledge of endpoint security tools (EDR/XDR), including antivirus and malware mitigation tools
• Ability to oversee and manage SIEM platforms
• Ability to think critically, analyze risk, consider possible solutions, and make recommendations
• Demonstrated ability to communicate effectively both verbally and in writing with diverse groups of organizations and people
• Ability to develop relationships with and provide guidance to all levels of management regarding employee system access
• Ability to maintain the highest professional standards
• Ability to be accurate, thorough, and productive with all work
• Demonstrated understanding of networking ports and protocols, trac flow, system administration, defense-in-depth, and common security elements
• Ability to manage security incident responses, post-incident investigations, and communicate updates to University stakeholders
• Demonstrated understanding of federal and state security standards, including FERPA, NIST 800 Series, PCI Compliance Regulations, and the Commonwealth of Virginia
• Knowledge of firewalls and IDS/IPS technologies as it relates to secure environments
• Demonstrated adaptability and the ability to grow within the information security field
• Demonstrated understanding of technical, engineering, and programmatic capabilities related to information systems and/or subsystems
• Ability to develop and create parsers for ingesting logs into SIEM platforms

Education, Experience, Licensure, Certification Required

Education:

• High school graduate or equivalent education/experience that equates to a high school diploma

Experience:

• Significant experience within the information security field
• Moderate experience in a leadership or managerial role
• Experience managing security systems to include architecture, design, installation, operational planning, and/or risk remediation activities on an enterprise level
• Experience performing information security tasks such as performing IT/technical audits, security vulnerability assessments, system configuration verifications, and/or security-related assignments
• Possession of a current and maintained Information Security certification such as a CISSP, CISM, or similar.

Additional Consideration(s)

Education:

• BA or BS in Information Security, Information Assurance, Computer Science, or related equivalent professional experience
• A master's degree in Computer Science, Cybersecurity, or related technical field

Experience:

• Significant experience working with centralized logging solutions (e.g., parsing logs, developing dashboards and reports)
• Experience with vulnerability scanning
• Experience with compliance verification tools
• Experience with system authorizations and supporting security documentation development such as System Security Plans (SSP), security architecture, system access requests, Risk Assessments, and Plans of Actions and Milestones (POA&M)
• Experience in incident responses to include investigating, remediating, and/or documenting security issues
• Experience conducting university-wide security training programs
• Experience working in a higher education environment
• Experience developing Standard Operating Procedures and/or playbooks

Salary Information Salary $78,063 to $97,579, Commensurate with Education and Experience CNU Information

This position includes Commonwealth of Virginia and Christopher Newport University employee benefits. CNU offers a comprehensive benefits package to include retirement plans, medical, dental, vision, and a variety of other options. Available leave includes vacation, sick time, personal time, and volunteer/service leave. State employees are eligible for discounted travel, banking, legal and retail services, among others. To view more information about our benefits, please visit https://cnu.edu/hr/benefits/.

Role Code 39113 Conditions of Employment

• This is a classified position. New and returning classified employees are required to complete a 12-month probationary period.
• Selected candidate must attend a 2-day New Employee Orientation Program.
• This position is designated as an on-campus position and requires regular in-person work at the university's campus.
• Selected candidate must be able to perform their duties on campus during assigned work hours.
• This position is not eligible for full-time remote work, and requests to negotiate a fully remote arrangement will not be considered.
• Any telework opportunities are limited, subject to university policy and departmental approval, and may be modified or discontinued at any time.

Is this position telework eligible? Yes Telework Eligibility Disclaimer

This position is eligible for periodic telework as determined by the department. Eligibility is not guaranteed, and is subject to supervisor approval. Eligibility will depend on the likelihood of the employee's success in a telework arrangement and the supervisor's ability to manage telework. Departments and/or Human Resources may modify or revoke eligibility at any time. Employees will be required to sign a Telework Agreement.

Physical/Cognitive Requirements

Light Lifting (less than 20 lbs.) Essential Moderate Lifting (20-50 lbs.) Marginal Heavy Lifting (more than 50 lbs.) Marginal Pushing/Pulling Marginal Standing Essential Sitting Essential Bending Essential Walking Essential Climbing Non-Applicable Reaching Essential Repetitive Motion Essential List other physical requirements

Emotional Demands

Fast Pace Essential Average Pace Marginal Multiple Priorities Essential Intense Customer Interaction Essential Multiple Stimuli Essential Frequency Changes Essential

Mental/Sensory Demands

Memory Essential Reasoning Essential Hearing Marginal Reading Essential Analyzing Essential Logic Essential Verbal Communication Essential Written Communication Essential List other mental/sensory requirements

Posting Detail Information

Posting Number PS1263P Number of Vacancies 1 Posting Date 10/08/2026 Closing Date 10/16/2026 Open Until Filled No Special Instructions to Applicants

CNU will only accept online applications through the jobs.cnu.edu website. Online applications must be received by midnight on the closing date indicated in a job announcement. Faxed, emailed, hand-delivered or mailed applications and attachments will NOT be accepted. Applicants are welcome to complete an online application by using computers located in the Office of Human Resources. Address: CNU North - 321 Hiden Boulevard, Suite 101, Newport News, VA 23606. Public computers are also available in nearby libraries and at the Virginia Employment Commission. Address: 600 Butler Farm Road, Hampton, VA 23666 (M-F 9am-4:30pm).

In order to be considered for this position, your application must provide evidence of experience and/or education supporting the requirements outlined in the posting. We encourage you to be clear and specific when describing your experience. *Responses to supplemental questions alone are not considered evidence of experience and/or education.

Quick Link for Direct Access to Posting https://jobs.cnu.edu/postings/21283 Advertising Text EEO/Diversity Statement(s)

Christopher Newport University, an EO Employer, is fully Committed to Access and Opportunity.

Notice of Non-Discrimination & Title IX Policy Statement

Reasonable Accommodation Request

Christopher Newport University (CNU) will make a reasonable effort to accommodate persons with disabilities in the application and/or interview process. Persons with disabilities who require accommodation should contact the CNU Human Resources Office by calling (757) 594-7145.

Alternative Hiring Process

In support of the Commonwealth's commitment to inclusion, we are encouraging individuals with disabilities to apply through the Commonwealth's Alternative Hiring Process.

To be considered for this opportunity, applicants will need to upload an approved AHP Letter received from the Department for Aging & Rehabilitative Services (DARS) or from the Department for the Blind & Vision Impaired (DBVI) to their applications.

Note: Certificates of Disability provided by DARS or DBVI dated April 1, 2022, through February 29, 2024, will still be accepted as applicable for the AHP. The name change to AHP Letter became effective March 1, 2024.

Service-Connected Veterans are encouraged to answer Veteran status questions and submit their disability documentation, if applicable, to DARS to get their AHP Letter.

Requesting an AHP Letter can be found at AHP Letter or by calling DARS at 800-552-5019.

Background Check

Applicant finalists are required to complete a CNU sponsored background check. After accepting employment, individuals are required to complete a USCIS Form I-9 (employment eligibility verification) and present documentation from the USCIS List of Acceptable Documents that establishes both their identity and employment authorization to work in the United States. The provided documents will be verified through the Department of Homeland Security E-Verify website.

Supplemental Questions

Required fields are indicated with an asterisk (*).

• Do you have a valid Interagency Placement Screening Form (Yellow Card)? This form is provided to Commonwealth of Virginia employees when they are notified that they will be affected by a layoff per Policy 1.30. This form must be attached in order to receive credit.

• Yes

• No

• Do you have a Preferential Hiring Form (Blue Card)? This form is provided to Commonwealth of Virginia employees when they are notified that they will be affected by a layoff per Policy 1.30. This form must be attached in order to receive credit.

• Yes

• No

• • Have you retired from a VRS covered position?

• Yes

• No

• Would you like to be considered for the Alternative Hiring Process (AHP)?

• Yes

• No

• If you would like to be considered for the Alternative Hiring Process (AHP), did you provide your AHP Letter?

• Yes

• No

• • Are you a high school graduate, or do you have equivalent education/experience that equates to a high school diploma?

• Yes

• No

• • Do you have significant experience within the information security field?

• Yes

• No

• • Do you have moderate experience in a leadership or managerial role?

• Yes

• No

• • Do you have experience managing security systems to include architecture, design, installation, operational planning, and/or risk remediation activities on an enterprise level?

• Yes

• No

• • Do you have experience performing information security tasks such as performing IT/technical audits, security vulnerability assessments, system configuration verifications, and/or security-related assignments?

• Yes

• No

• • Do you possess a current and maintained Information Security certification such as a CISSP, CISM, or similar?

• Yes

• No

• Do you have a BA or BS in Information Security, Information Assurance, Computer Science, or related equivalent professional experience?

• Yes

• No

• Do you have a master's degree in Computer Science, Cybersecurity, or a related technical field?

• Yes

• No

• Do you have significant experience working with centralized logging solutions (e.g., parsing logs, developing dashboards and reports)?

• Yes

• No

• Do you have experience with vulnerability scanning?

• Yes

• No

• Do you have experience with compliance verification tools?

• Yes

• No

• Do you have experience with system authorizations and supporting security documentation development such as System Security Plans (SSP), security architecture, system access requests, Risk Assessments, and Plans of Actions and Milestones (POA&M)?

• Yes

• No

• Do you have experience in incident responses to include investigating, remediating, and/or documenting security issues?

• Yes

• No

• Do you have experience conducting university-wide security training programs?

• Yes

• No

• Do you have experience working in a higher education environment?

• Yes

• No

• Do you have experience developing Standard Operating Procedures and/or playbooks?

• Yes

• No

• • This position is not eligible for full-time remote work and requires regular on-campus presence. Are you able to meet this requirement?

• Yes

• No

Documents Needed To Apply

Required Documents

Optional Documents

• Cover Letter
• Resume
• Licensure/Certification
• Other Application Materials
• DD214
• Yellow Layoff Form
• Blue Layoff Card
• AHP Letter