Director of Cybersecurity Risk Management

5 days ago


Washington, United States Georgetown University Full time

Located in a historic neighborhood in the nation's capital, Georgetown offers rigorous academic programs, a global perspective, exciting ways to take advantage of Washington, D.C., and a commitment to social justice. Our community is a tight knit group of remarkable individuals interested in intellectual inquiry and making a difference in the world.

**Requirements**:
Director of Cybersecurity Risk Management - University Information Services - Georgetown University

Job Overview

The Director of Cybersecurity Risk Management is responsible for the development, enforcement, and general management of the university’s cybersecurity risk management, vulnerability management, policies, and audit activities. They support the Georgetown University information security program through ownership of policy development and enforcement.

They run the vulnerability management program, to include ensuring that system owners and system managers keep all systems up to date with current patches and reducing, eliminating, or mitigating vulnerabilities; and lead the cybersecurity awareness and training program to include education, outreach, and performing phishing training campaigns.

In a Senior-level position within the UISO, the Director represents the Office of the Chief Information Security Officer (CISO) on cybersecurity risk and vulnerability management across GU; serves point-of-contact for the security posture concerns related to departments and organizations outside UIS, the alternate representative of the organization’s security presence to external parties, and the alternate contact point for external auditors and agencies; and ensures compliance with current and emerging regulatory requirements related to cyber security.

Work Interactions

Reporting to the Deputy Chief Information Security Officer, the Director of Cyber Risk Management has interactions with - and may impact - University senior executives, administrators, faculty, alumni, staff, and students, as well as technical staff and IT managers throughout the entire University.

They necessarily communicate effectively and professionally through verbal and written interactions with multiple groups and are self-directed based upon input from the CISO and other appropriate University leadership.

As well, they supervise Security Analysts as assigned to assist with the execution of designated responsibilities.

And in a position of trust, the Director has access to University data or information that may be highly sensitive or confidential in nature.

Requirements and Qualifications
- Related technical certification or equivalent combination of education _(minimum of Bachelor’s degree)_ _and_ experience required (with solid technical understanding of multi-platform / hosted environments and their operational/security considerations)
- 7 years or more of information security and/or IT compliance and assurance experience - with at least 2 years in a supervisory / lead role - _preference _for higher education industry experience
- Firm understanding and experience addressing key IT compliance regulations & obligations - _including_ HIPAA, PCI, FERPA, GLBA, and others as identified
- Track record of risk assessment, problem identification, analytical problem solving, and issue resolution
- Ability to learn quickly with strong foundation in understanding and assessing processes and controls
- Excellent written/verbal communication skills with the ability to regularly present to groups
- Availability and willingness to work outside of usual business hours of Georgetown University - including potential on-call responsibilities or to provide assistance for security incidents

Technical Responsibilities/Qualifications
- Understanding of governance and compliance and the ability to enforce policies
- Understanding of threat landscape and ability to manage risk across a dispersed portfolio
- Familiarity with Cyber Security frameworks, including NIST and ISO Security Architecture/Engineering

The Director of Cyber Risk Management is expected to sign a confidentiality agreement and expected to abide by and enforce University policies.

The expected pay range for this position is $103,723 to $169,950 per year.

Current Georgetown Employees:
If you currently work at Georgetown University, please exit this website and login to GMS

gms.georgetown.edu

) using your Net ID and password. Then select the Career worklet on your GMS Home dashboard to view Jobs at Georgetown.

Submission Guidelines:
Please note that in order to be considered an applicant for any position at Georgetown University you must submit a resume for each position of interest for which you believe you are qualified. Documents are not kept on file for future positions.

Need Assistance:
here

for more information, or contact the Office of Institutional Diversity, Equity, and Affirmative Action (IDEAA) at 202-687-4798 or


website


EEO Statement:
Georgetown University is an

Equal Opportunity/Affirmat



  • Washington, United States MORS Full time

    Details Posted: 31-May-24 Location: Washington, D.C. Type: Full-time Salary: Open Internal Number: Director of Cybersecurity Risk Management - University Information Services - Georgetown University Located in a historic neighborhood in the nation's capital, Georgetown offers rigorous academic programs, a global perspective,...


  • Washington, United States MORS Full time

    Details Posted: 31-May-24 Location: Washington, D.C. Type: Full-time Salary: Open Internal Number: Director of Cybersecurity Risk Management - University Information Services - Georgetown University Located in a historic neighborhood in the nation's capital, Georgetown offers rigorous academic programs, a global perspective,...


  • Washington, United States Watermark Risk Management International Full time

    Job DescriptionJob DescriptionCome make your mark with Watermark! 🎖️ FOUNDED BY USAF VETERANS in 2007, we are proud to be a Service-Disabled Veteran Owned Small Business.🌎 SUBJECT MATTER EXPERTS specializing in security and risk management. We’re intimately familiar with DOD security programs and mission requirements.⭐ OUR CORE VALUES drive...


  • Washington, United States Watermark Risk Management International Full time

    Job DescriptionJob DescriptionCome make your mark with Watermark! 🎖️ FOUNDED BY USAF VETERANS in 2007, we are proud to be a Service-Disabled Veteran Owned Small Business.🌎 SUBJECT MATTER EXPERTS specializing in security and risk management. We’re intimately familiar with DOD security programs and mission requirements.⭐ OUR CORE VALUES drive...


  • Washington, United States Watermark Risk Management International Full time

    Job DescriptionJob DescriptionCome make your mark with Watermark! 🎖️ FOUNDED BY USAF VETERANS in 2007, we are proud to be a Service-Disabled Veteran Owned Small Business.🌎 SUBJECT MATTER EXPERTS specializing in security and risk management. We’re intimately familiar with DOD security programs and mission requirements.⭐ OUR CORE VALUES drive...


  • Washington, United States Watermark Risk Management International, LLC Full time

    Job Description Job Description Come make your mark with Watermark! FOUNDED BY USAF VETERANS in 2007, we are proud to be a Service-Disabled Veteran Owned Small Business. SUBJECT MATTER EXPERTS specializing in security and risk management. We’re intimately familiar with DOD security programs and mission requirements. OUR CORE VALUES drive every action we...


  • Washington, United States Watermark Risk Management International, LLC Full time

    Job Description Job Description Come make your mark with Watermark! FOUNDED BY USAF VETERANS in 2007, we are proud to be a Service-Disabled Veteran Owned Small Business. SUBJECT MATTER EXPERTS specializing in security and risk management. We’re intimately familiar with DOD security programs and mission requirements. OUR CORE VALUES drive every action we...

  • Cybersecurity Manager

    2 weeks ago


    Washington, United States Management Solutions LLC Full time

    Job DescriptionJob DescriptionWho we are…Management Solutions is a national award-winning management consulting firm that specializes in clean energy program management, organizational maturity assessment, environmental services, and project strategy and implementation. We deliver simple, innovative solutions to complex problems facing our federal...


  • Washington, United States Z1 Discovery Communications LLC Full time

    Who We Are… When we say, “the stuff dreams are made of,” we’re not just referring to the world of wizards, dragons and superheroes, or even to the wonders of Planet Earth. Behind WBD’s vast portfolio of iconic content and beloved brands, are the bringing our characters to life, the bringing them to your living rooms and the creating what’s...


  • Washington, United States SAIC Full time

    Job ID: 2405870 **Location**:WASHINGTON, DC, US **Date Posted**:2024-04-24 **Category**:Program Management **Subcategory**:Project Analyst **Schedule**:Full-time **Shift**:Day Job **Travel**:No **Minimum Clearance Required**:None **Clearance Level Must Be Able to Obtain**:Public Trust **Potential for Remote Work**:No **Description** Our team is...


  • Washington, United States SoundExchange Full time

    Title:Manager, Cybersecurity EngineeringDepartment:ITOpsJob Location:Washington, DC or anywhere (Continental US)Reports To:Senior Director, ITOpsSupervisory Role:YesFLSA Status:Exempt Position Summary:Are you passionate about cybersecurity and motivated to lead a team that secures networks and technology in the music industry? We're looking for an...


  • Washington, United States Amgen Full time

    **HOW MIGHT YOU DEFY IMAGINATION?** If you feel like you’re part of something bigger, it’s because you are. At Amgen, our shared mission—to serve patients—drives all that we do. It is key to our becoming one of the world’s leading biotechnology companies. We are global collaborators who achieve together—researching, manufacturing, and delivering...


  • Washington, United States General Healthcare Resources Full time

    This is a Permanent Onsite Role in D.C. Flexible hybrid schedule after the first couple of months. Position Overview: As the Manager of Cybersecurity, you will play a pivotal role in securing the organization against cyber threats and ensuring the confidentiality, integrity, and availability of critical information. You will lead the building of a team of...


  • Washington, United States General Healthcare Resources Full time

    This is a Permanent Onsite Role in D.C. Flexible hybrid schedule after the first couple of months. Position Overview: As the Manager of Cybersecurity, you will play a pivotal role in securing the organization against cyber threats and ensuring the confidentiality, integrity, and availability of critical information. You will lead the building of a team of...


  • Washington, United States SAIC Full time

    Job ID: 2407676 **Location**:WASHINGTON, DC, US **Date Posted**:2024-05-31 **Category**:Program Management **Subcategory**:Project Analyst **Schedule**:Full-time **Shift**:Day Job **Travel**:No **Minimum Clearance Required**:None **Clearance Level Must Be Able to Obtain**:Public Trust **Potential for Remote Work**:No **Description** Our team is...


  • Washington, United States SAIC Full time

    Job ID: 2407676 **Location**:WASHINGTON, DC, US **Date Posted**:2024-05-31 **Category**:Program Management **Subcategory**:Project Analyst **Schedule**:Full-time **Shift**:Day Job **Travel**:No **Minimum Clearance Required**:None **Clearance Level Must Be Able to Obtain**:Public Trust **Potential for Remote Work**:No **Description** Our team is...


  • Washington, United States General Healthcare Resources Full time

    This is a Permanent Onsite Role in D.C. Flexible hybrid schedule after the first couple of months. Position Overview:As the Manager of Cybersecurity, you will play a pivotal role in securing the organization against cyber threats and ensuring the confidentiality, integrity, and availability of critical information. You will lead the building of a team of...


  • Washington, United States Coalfire Federal Full time

    About Coalfire Coalfire Federal is a market leading cybersecurity consultancy firm that provides independent and tailored advice, assessments, technical testing and a full suite of cyber engineering services to Federal agency customers. Coalfire Federal along with its parent company, Coalfire, has an unparalleled client list with deep customer relationships...


  • Washington, United States Robert Half Full time

    Principal Duties and ResponsibilitiesReasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.Conducts criticality determinations using Business Impact Analysis and risk assessment methodologies specific to Microsoft's security stack.Completes comprehensive system security documentation, with a focus on...


  • Washington, Washington, D.C., United States Office Of The National Cyber Director Full time

    As a IT Cybersecurity Specialist (PLCYPLN), GS-2210-9, your typical work assignments may include the following:Develops, conducts oversight of, and assess effectiveness of federal cybersecurity programs. Assists on coordinating the implementation of technology solutions, and associated policies, to build standardization across the U.S. government. Performs...