Senior Information Security Engineer (FT), CFRE43224IT

The Senior Information Security Engineer at College of DuPage, reporting to the Senior Manager, IT Security, will play a critical role in maintaining and improving the institution's cybersecurity framework. This position is responsible for designing, and implementing security measures to protect the college's systems, networks, and data from security breaches. This position will collaborate with IT, academic, and administrative staff to ensure the highest standards of cybersecurity while supporting the educational mission of the institution.

Proactively monitor network traffic and systems vulnerabilities to detect security incidents and breaches. Respond to security incidents, performing root cause analysis and developing mitigation strategies. Maintain and test incident response plans to ensure rapid recovery in the event of security breaches or failures.

Work with Managed Security Service Provider to implement security operation solutions and act as point of contact for cybersecurity escalations. Lead the operation of security tools and platforms, such as Security Information and Event Management (SIEM) systems, and endpoint protection. Design, implement, and maintain security architectures and technologies such as encryption protocols, identity and access management (IAM), and secure network infrastructure.

Maintain the encryption and protection of sensitive data, including personally identifiable information (PII), financial data, and intellectual property. Implement and manage data loss prevention (DLP) solutions. Lead vulnerability scans and penetration tests to identify and prioritize potential threats.

Implement risk mitigation tasks. Develop and update information security policies, standards, and guidelines in accordance with industry best practices, regulations (e.g., FERPA, HIPAA), and compliance frameworks (e.g., NIST, ISO 27001). Support security awareness programs for students, faculty, and staff to ensure the campus community understands security risks and best practices.

Work closely with academic and administrative departments to ensure the institution's technology and security needs are met. Evaluate the security posture of third-party vendors, partners, and cloud service providers. Ensure that appropriate security controls are in place when integrating external systems.

(Vendor Third-Party Risk Assessment) Stay up to date with the latest cybersecurity trends, tools, and threats, and assess their impact on the college’s infrastructure and systems. Performs other duties as assigned.