Supervising Programmer/Analyst

Anticipated hire date: 12/01/2026; Application deadline: 09/13/2026.

About the role

Buffalo State College, part of the SUNY system, seeks an Information Security Officer for its External Security Services team. The role provides strategic cybersecurity leadership and advisory services to higher education institutions, focusing on assessing and implementing security strategies, policies, and frameworks aligned with university needs, managing cyber risk, regulatory compliance, and protecting academic, research, and administrative data. The officer serves as a trusted security advisor to campus and ITEC senior management, communicating risks and recommendations in business‑relevant terms. The position may be based in Buffalo, NY, with possible office locations at other New York State or SUNY institutions.

Responsibilities

• Provide strategic cybersecurity leadership and advisory services to higher education institutions.
• Assess and implement security strategies, policies, and frameworks aligned with university needs.
• Manage cyber risk and ensure regulatory compliance (e.g., GLBA, PCI, FERPA, HIPAA).
• Serve as a trusted security advisor to campus and ITEC senior management, communicating risks, priorities, and recommendations in business‑relevant terms.
• Lead team and manage security programs, with a strong project‑management focus.
• Coordinate deliverables with the Security Services Service Delivery Manager.
• Help define, oversee, and contribute to approved campus security projects.
• Support campuses during security incidents and advise on security‑focused software, system requirements, and appropriate hardware/software configurations.

Requirements

• Bachelor’s degree in a security, computing, programming, networking or related field.
• Progressive relevant professional work experience.
• Good presentation, interpersonal, written, and communication skills.
• Demonstrated familiarity with compliance requirements (PCI, GLBA, FERPA) and NIST Cybersecurity Framework (CSF) or equivalents.
• Demonstrated familiarity with creating and implementing security policies, risk assessments, and