College of Charleston logo

College of Charleston

Chief Information Security Officer (CISO)

🇺🇸 Charleston, SC

🕑 Full-Time

💰 TBD

💻 Cybersecurity

🗓️ October 8th, 2025

CISSP FERPA

Edtech.com's Summary

College of Charleston is hiring a Chief Information Security Officer (CISO). The CISO leads the institution's information security program by developing cybersecurity strategies, managing risk, and collaborating with executive leadership and campus stakeholders to implement security policies and standards. This role also involves overseeing cybersecurity operations, fostering a culture of responsible data stewardship, and ensuring compliance with legal and regulatory requirements.

Highlights

  • Leads College of Charleston's cybersecurity strategy and manages the Office of Information Security.

  • Develops and maintains an institution-wide information security plan and risk mitigation controls.

  • Oversees security operations including incident response, enterprise risk management, security training, and compliance.

  • Coordinates with executive leadership, Faculty, Legal Counsel, Cabinet, Board of Trustees, and campus departments.

  • Develops policies on data classification, retention, and privacy aligned with risk management frameworks.

  • Requires a master’s degree in business administration or technology and at least ten years of executive leadership experience in information security, risk management, or IT.

  • Certified Information Systems Security Professional (CISSP) certification is required.

  • Must possess knowledge of legal and regulatory frameworks such as GLBA, HIPAA, PCI, FERPA, GDPR, and DMCA.

  • Must be willing to be on call for emergencies and travel as needed.

  • Salary commensurate with education and experience; benefits include health, dental, vision insurance, paid leave, retirement plans, and employee assistance programs.

Chief Information Security Officer (CISO) Full Description

Chief Information Security Officer (CISO) Bookmark this Posting Print Preview | Apply for this Job

Please see Special Instructions for more details.
Applications should include the applicant’s full name, position, institution/organization, and email address.

Applications should consist of the following documents, to be submitted electronically in .pdf format:
1) a detailed letter of interest;
2) a full resume/curriculum vitae with relevant administrative responsibilities and accomplishments; and
3) a list of five professional references, including names, phone numbers, and email addresses, noting the candidate’s relationship with each reference.

References will not be contacted until later in the search process and only with the candidate’s permission.
Posting Details
POSTING INFORMATION
Internal Title Chief Information Security Officer (CISO)
Position Type Unclassified
Faculty / Non-Faculty / Administration Administration
Pay Band
Level
Department Security
Job Purpose
Reporting to the Chief Information Officer & VP for IT, the Chief Information Security Officer (CISO) is responsible for managing the College of Charleston’s information security program to maintain compliance and align with institutional risk. The CISO works with executive leadership—including the CIO, Legal Counsel, Cabinet, Board of Trustees, and campus stakeholders—to establish risk levels and coordinates with various departments to implement policies and standards. In this role, the CISO balances multiple program priorities and recognizes information security as one aspect of the university’s overall mission. The CISO plays a critical role in advancing a culture of responsible data stewardship across the College, ensuring that data classification, retention, and privacy obligations are embedded into daily operations.
Minimum Requirements
A master’s in business administration or a technology field, plus at least ten years of relevant executive leadership and professional experience—or an equivalent combination of education, training, and work history—is required. Relevant experience includes risk management, information security, or IT roles with increasing responsibility and leadership. Strong communication and collaboration skills are needed, along with the ability to explain security and risk concepts to both technical and nontechnical audiences. Candidates with an equivalent combination of experience and/or education are encouraged to apply.
Required Knowledge, Skills and Abilities
  • Proven track record and experience in developing information security policies and procedures, as well as successfully executing programs that meet the objectives of excellence in a dynamic academic environment.
  • Poise and ability to act calmly and competently in high-pressure, high-stress situations.
  • Demonstrated ability to be a critical thinker, with strong problem-solving skills, a high degree of initiative, dependability, and the ability to work with diverse constituencies.
  • Knowledge and understanding of relevant legal and regulatory requirements, such as Gramm-Leach-Bliley Act (GLBA), Health Insurance Portability and Accountability Act (HIPAA), Payment Card Industry (PCI), Family Educational Rights and Privacy Act (FERPA), General Data Protection Regulation (GDPR), Digital Millenium Copyright Act (DMCA), etc.
  • Demonstrated experience establishing and maintaining data classification schemes, retention schedules, and privacy controls consistent with institutional policy and applicable regulations.
  • Certified Information Systems Security Professional (CISSP) required.
Additional Comments Regarding Position
Must be willing to be on call for emergencies. Must be willing to travel as required for conferences and consultations.
Special Instructions to Applicants
Applications should include the applicant’s full name, position, institution/organization, and email address.

Applications should consist of the following documents, to be submitted electronically in .pdf format:
1) a detailed letter of interest;
2) a full resume/curriculum vitae with relevant administrative responsibilities and accomplishments; and
3) a list of five professional references, including names, phone numbers, and email addresses, noting the candidate’s relationship with each reference.

References will not be contacted until later in the search process and only with the candidate’s permission.
Salary *Commensurate with education and experience
Posting Date 10/07/2025
Closing Date 11/07/2025
Benefits
  • Insurance: Health/Dental/Vision
  • Life Insurance
  • Paid Leave: Sick/Annual/Parental
  • Retirement
  • Long Term Disability
  • Paid Holidays
  • Free CARTA Bus Service
  • Employee Tuition Assistance Program (ETAP)
  • Employee Assistance Program (EAP)
  • Full Benefits Package – Click Here
Open Until Filled No
Posting Number 2025135
EEO Statement
The College of Charleston is an equal opportunity employer and does not discriminate against any individual or group on the basis of sex, gender (including gender identity and/or expression), pregnancy, race, religion, color, national origin, age, disability, military or veteran status, sexual orientation, genetic information, and other classifications protected by applicable federal, state, and local laws. For more information, please visit eop.cofc.edu.
Quicklink for Posting https://jobs.cofc.edu/postings/17251
Job Duties
Job Duties
Activity
Leads the College’s cybersecurity strategy and oversees the Office of Information Security, ensuring the effective management and implementation of essential cybersecurity frameworks, table stakes documents, and governance policies. Responsible for centrally coordinated services through specialized units, including cybersecurity training and awareness, enterprise risk management, incident response, security operations, information security finance and planning, and compliance oversight. Provides a forward-thinking information security vision that empowers the College to achieve its strategic goals by embedding robust cybersecurity practices into all facets of the organization. Fosters a culture of security excellence, transparency, and collaboration while structuring cybersecurity services to be responsive and aligned with the needs of the academic community. Develops and maintains effective cybersecurity governance in partnership with business owners, ensuring IT acts as a trusted facilitator among stakeholders and enables secure, compliant, and innovative operations across the College.
Essential or Marginal Essential
Percent of Time 25
Activity
Develop and maintain a university-wide information security plan and assessment standard, establishing robust technical controls and solutions to mitigate risks and safeguard critical infrastructure supporting enterprise applications, learning technologies, and research computing. Partner with academic and administrative leaders to enhance the security, effectiveness, and efficiency of instructional and research programs by implementing innovative and prudent information security technologies and practices.
Collaborate with university leadership, faculty, and staff to ensure the information security strategy addresses the comprehensive needs of all stakeholders. Champion cross-functional collaboration throughout the university to foster integrated planning, shared responsibility, and professional relationships that facilitate the development and deployment of common security solutions. Leverage collective expertise and investments across the institution to proactively address emerging threats, ensure compliance, and maintain readiness for evolving cybersecurity challenges.
Essential or Marginal Essential
Percent of Time 25
Activity
Oversee the division’s information security operations and services, ensuring timely, high-quality, and cost-effective delivery aligned with the college’s values and strategic objectives. Develop and manage budget plans, prioritizing initiatives that maintain robust and reliable security measures, while also accommodating requests for new security services and enhancements to existing protocols.  Lead efforts to recruit, retain, develop, and evaluate highly qualified information security professionals to support and advance the college’s cybersecurity posture.
Essential or Marginal Essential
Percent of Time 25
Activity
Ensure robust mitigation strategies, incident response capabilities, and cyber recovery processes are in place to protect against emerging threats and support rapid restoration of services in the event of security incidents.
Essential or Marginal Essential
Percent of Time 15
Activity
Develop, implement, and continuously monitor policies and practices to safeguard the College’s technology infrastructure and institutional data, including data classification, retention, and privacy policies that protect sensitive information and align with risk management frameworks.
Essential or Marginal Essential
Percent of Time 10
Supplemental Questions

Required fields are indicated with an asterisk (*).

  1. * How did you hear about this employment opportunity?
    • Chronicle of Higher Education
    • CofC - Alumni Career Services
    • College of Charleston Website
    • Diverse: Issues in Higher Education
    • Glassdoor
    • Handshake
    • HigherEdJobs
    • Indeed.com
    • Internal Job Posting
    • jbcjobs (Joint Base Charleston Military & Family Readiness)
    • Job Fair
    • LinkedIn
    • Monster.com
    • Personal Referral
    • Post and Courier
    • Public Job Posting
    • SC Works (SC Department of Employment and Workforce)
    • Twitter
    • Word of mouth
    • Other
    • National Labor Exchange
    • CareerBuilder
Applicant Documents
Required Documents
  1. Resume
  2. Cover Letter / Letter of Application
  3. Reference List

Optional Documents

  1. Other Document
  2. Other Document 2
  3. Other Document 3
  4. Form DD 214

Email: jobs@cofc.edu
General Information: 843.953.5512
Mailing Address: 66 George St.
Charleston, SC 29424

HR Office 160 Calhoun St.
Lightsey Building B36
Charleston, SC 29424
Campus Maps

©2020 All Rights Reserved. Privacy Policy

To ensure the security of your data, you will be logged out due to inactivity in 3 minutes at
.

Any data not saved will be lost.

Click 'OK' to keep your session active.