Information Security Officer

Responsibilities

• Lead the development and implementation of enterprise-wide information security architecture and solutions.
• Provide strategic direction and guidance in the design of secure system and network architectures.
• Evaluate and ensure compliance of new and existing applications with enterprise security standards.
• Lead internal and external security audits, in cooperation with the necessary departments.
• Lead continuous monitoring and analysis of emerging trends, threats, and developments in information security to maintain the organization's leading security posture.
• Research, design, and advocate for new technologies, architectures, and security products for deployment across the campus.
• Strategize, oversee, and optimize the development, implementation, and management of comprehensive IT security and operational support system policies and procedures, ensuring alignment with organizational goals and regulatory requirements, in collaboration with the Information Security Office and senior leadership of the University.
• Lead and develop mentoring, training, and technical guidance programs for team members, customers, and stakeholders, and community of IT professionals ensuring knowledge transfer and fostering a culture of continuous improvement and professional growth.
• Develop and implement incident response plans and procedures to ensure timely and effective handling of security incidents and breaches.
• Oversee the development, implementation, and management of IT security and operational support system policies and procedures, in collaboration with the Information Security Office.

Requirements

• Advanced knowledge and understanding of IT industry trends and emerging technologies and an ability to relate them to Stanford and its objectives.
• Extensive experience with debugging, troubleshooting, forensics, and security utilities.
• In-depth architecture and configuration knowledge.
• In-depth knowledge of authentication protocols, encryption, and other fundamental security technologies.
• Strong knowledge and understanding of industry-standard information security practices.
• Excellent communication skills and the ability to explain complex technical ideas to a non-technical audience and work with individuals at all levels.
• Demonstrated experience in leading and mentoring team members and providing technical guidance to customers and stakeholders.
• High level of integrity and excellent judgment concerning proprietary and privacy issues.