Information Security Program Manager - 133584

UC San Diego is ranked the 9th best public university in the nation by U.S. News and World Report and is the largest employer based in San Diego County.

Reporting to the VC-CFO, Information Technology Services (ITS) delivers Enterprise information technology services to the University of California, San Diego (UCSD) under the leadership of the campus Chief Information Officer (CIO). Information Technology Services (IT Services) uses world-class services and technologies to empower UC San Diego's mission to transform California and the world as a student-centered, research-focused, service-oriented public university. As a strategic member of the UC San Diego community, IT Services embraces innovation in their delivery of IT services, infrastructure, applications, and support. IT Services is customer-focused and committed to collaboration, continuous improvement, and accountability.

Equity, Diversity, and Inclusion are core values at UC San Diego and within Information Technology Services. Crafting a culture around these values allows us to more deeply connect with and appreciate our employees, students, and campus partners. Information Technology Services is continuously working to build a community where we all feel safe, empowered, and encouraged to bring our authentic selves to work. We do this not only because it is what's right, but because we know that diversity drives insight and innovation. We are proud to partner closely UC San Diego's Office for Equity, Diversity, and Inclusion, as their dedication to this mission helps us all to drive change.

The Office of Information Assurance (OIA) (a department within ITS) is responsible for the infrastructure, policies, standards and training necessary to ensure the achievement of the security and privacy goals of the University. The department collaborates closely with various campus resources and partners, including campus unit information security leads (UISLs), system administrators, campus counsel, health and campus privacy officers, and research compliance, to respond to and mitigate cybersecurity and information assurance risks, threats and vulnerabilities.

OIA delivers a comprehensive set of enterprise information security services in the areas of security policy, assessment, compliance, consulting, operations, incident response and risk management. The department is responsible for the design, deployment and administration of network, endpoint, application and information asset protection systems. Information Security staff also work closely with the Infrastructure and Operations department to provide the campus-wide network/security infrastructure.

The Information Security Program Manager is responsible for the management and coordination of elements of UCSD's overall information security program that are housed within ITS and for project management leadership for large projects within the OIA team. Reporting directly to the CISO, this role is crucial in maintaining and enhancing the security posture of the organization.

This position applies advanced business process and analysis concepts and organizational objectives to resolve highly complex issues where analysis of situations or data requires an in-depth evaluation of variable factors. Selects methods, techniques and evaluation criteria to obtain results.

Responsibilities:

* Work closely with the CISO, OIA managers and their teams, ITS leadership and teams, Unit Information Security Leaders and other stakeholders to manage Information Security Management Program elements, ensuring timely update and communication, manage information security outreach and communication, manage recurring programs within OIA, operate as project manager for large security projects.

* Generate and review UCSD security metrics and assist with reporting and outreach on problem areas.

* Responsible for routine reporting requirements of the OIA and assist OIA managers with oversight and reporting requirements.

* Schedule and manage Risk Assessments as required by IS-3, schedule the review and update of Risk Treatment Plan and other policy and documentation updates.

* Serve as lead project manager for enterprise security projects and smaller OIA projects, collaborating with the OIA managers, the CISO and ITS support areas.

• Advanced knowledge of business and process analysis functions.

• Advanced knowledge of related areas of IT. Moderate knowledge of information security principles, practices, and technologies.

• Knowledge relating to the design of processes and software across the organization.

• Advanced skills and methodologies associated with process and software design, modification, and implementation.

• Demonstrated skills needed to develop process and system implementation plans.

• Demonstrated experience with process analysis, systems analysis, process architectures and systems analysis methodologies and practices including traditional waterfall, Agile, Agile Scrum, UML, UML Enterprise, et cetera.

• Understanding and skill in complex process and systems requirement documentation standards, such as Use Case modeling, User Story creations and narrative description.

• Advanced knowledge of information security frameworks (e.g., ISO 27001, NIST) and regulatory requirements.

• Demonstrated experience in managing and coordinating security audits and assessments.

• This position will have a Hybrid work schedule that requires being onsite a few days a week.

• Job offer is contingent upon satisfactory clearance based on background check results.

• Employee must be available to work evenings and weekends.

• Employee must be available to travel as required.

• For emergency situations, must be available 24/7.

If employed by the University of California, you will be required to comply with our Policy on Vaccination Programs, which may be amended or revised from time to time. Federal, state, or local public health directives may impose additional requirements.

To foster the best possible working and learning environment, UC San Diego strives to cultivate a rich and diverse environment, inclusive and supportive of all students, faculty, staff and visitors. For more information, please visit UC San Diego Principles of Community.

UC San Diego is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age or protected veteran status.

For the University of California's Affirmative Action Policy please visit: https://policy.ucop.edu/doc/4010393/PPSM-20
For the University of California's Anti-Discrimination Policy, please visit: https://policy.ucop.edu/doc/1001004/Anti-Discrimination

UC San Diego is a smoke and tobacco free environment. Please visit smokefree.ucsd.edu for more information.

Misconduct Disclosure Requirement: As a condition of employment, the final candidate who accepts a conditional offer of employment will be required to disclose if they have been subject to any final administrative or judicial decisions within the last seven years determining that they committed any misconduct; received notice of any allegations or are currently the subject of any administrative or disciplinary proceedings involving misconduct; have left a position after receiving notice of allegations or while under investigation in an administrative or disciplinary proceeding involving misconduct; or have filed an appeal of a finding of misconduct with a previous employer.

a. "Misconduct" means any violation of the policies or laws governing conduct at the applicant's previous place of employment, including, but not limited to, violations of policies or laws prohibiting sexual harassment, sexual assault, or other forms of harassment, discrimination, dishonesty, or unethical conduct, as defined by the employer. For reference, below are UC's policies addressing some forms of misconduct:

• UC Sexual Violence and Sexual Harassment Policy
• UC Anti-Discrimination Policy
• Abusive Conduct in the Workplace