[Hiring] Director of Information Security Engineering @Southern New Hampshire University

Role Description

The Director, Information Security Engineering will report to the Deputy Chief Information Security Officer. You will lead the university's security architecture and engineering strategy, modernizing platforms, practices, and operating models to deliver scalable, resilient, and effective security capabilities. You will improve adoption of modern security architectures, cloud-native approaches, and AI-enabled security capabilities that strengthen the institution's ability to manage evolving threats.

You will bring deep technical credibility to lead senior architects and engineers, a demonstrated track record of leading transformation in complex organizations, and the vision to align security architecture and engineering investments with institutional priorities, modern technology environments, and emerging risk.

You will work 100% remotely from any of our approved states.

What You'll Do:

• Drive organizational and cultural change within the team, promoting a growth mindset, accountability, and engineering excellence while building alignment and demonstrating measurable progress.
• Establish and promote modern security engineering practices, including infrastructure-as-code, security-as-code, zero trust architecture, and DevSecOps integration across the university's technology ecosystem.
• Be an internal change agent, advocating for security modernization across ITS and with university leadership.
• Provide authoritative technical direction across security architecture and engineering disciplines, including network and cloud security, endpoint and data protection, application security, and security tooling platforms.
• Lead the security architecture practice including defining clear service parameters, setting high technical standards, reviewing architecture decisions, and ensuring solutions are forward-looking, practical, and aligned to risk posture.
• Own the university's enterprise security reference architecture, ensuring it reflects current threat landscapes, regulatory requirements (NIST 800-171, GLBA, FERPA, etc.), and modern delivery models including cloud-native and hybrid environments.
• Evaluate, select, and oversee implementation of security technologies with disciplined focus on reducing complexity, improving efficacy, and enabling automation.
• Establish and lead the ISMO's strategy for applying AI and machine learning to advance security engineering capabilities and tooling.
• Partner with governance, risk, privacy, and AI stakeholders to assess and address security risks introduced by AI adoption including shadow AI, generative AI data exposure, and risks introduced by autonomous AI agents operating within enterprise environments.
• Stay current with the rapidly evolving AI security landscape and serve as a subject matter authority to the D-CISO, senior IT leadership, and AI leadership on both AI-enabled security and AI-security related risk.
• Identify opportunities to leverage automation and AI to increase the team's capacity and capability without proportional headcount growth.
• Partner with the Deputy CISO to define a multi-year Security Architecture and Engineering strategy, translating vision into actionable roadmaps, funded initiatives, and measurable outcomes.
• Develop and present compelling business cases to the Deputy CISO and CISO to secure funding, headcount, and organizational support for strategic initiatives.
• Build and manage a portfolio of security initiatives, ensuring alignment to institutional risk priorities, compliance obligations, and technology strategy.
• Collaborate with the AVP of Governance, Risk, Compliance and Privacy to ensure architecture and engineering decisions are grounded in risk and that controls are implemented effectively and measurably.
• Lead, develop, and retain a team of security architects, engineers, and managers — creating clear career paths, fostering technical excellence, and building a high-performing culture.
• Design and evolve the team structure, capabilities, and leadership depth required to deliver the future-state vision, aligning talent and resources to strategic priorities while developing both managers and individual contributors.
• Recruit and onboard talent capable of delivering the future-state vision, including individuals who bring skills the current team does not possess.
• Set clear expectations for performance, accountability, and continuous improvement across the team.
• Serve as a mentor and technical escalation point for architects and engineers navigating complex problems.
• Advise the Deputy CISO, CISO, and ISMO leadership team on security architecture, engineering trends, and emerging risks.
• Engage effectively with university stakeholders across business units, translating technical concepts into business and mission impact.
• Represent the security architecture and engineering function in governance forums, project review boards, and vendor negotiations.

Qualifications

• 10+ years of progressive cybersecurity experience.
• 5+ years of experience in a senior technical leadership role overseeing architecture or engineering functions, including at least 3 years of direct people management experience, with demonstrated ability to lead strategically, develop talent, and navigate complex organizational and technical challenges.
• Degree(s): Masters in Cybersecurity, or relevant discipline. Equivalent of experience in lieu of degree acceptable.
• Professional Certification(s): CISSP, ISC2 Certifications, GIAC.
• Experience as a security engineer or architect across at least two core disciplines (Platform Security, Application Security, AI Security, Cloud/Infrastructure Security, Data Security, DSPM).
• Experience securing Azure PaaS/IaaS, Microsoft 365, Microsoft Fabric, or similar.
• Experience as an engineer or architect across multiple security domains: zero trust architecture, application security, cloud security (Azure), identity and access management, network security, endpoint protection, data security, and security automation.
• Experience with AI and machine learning applications in cybersecurity, including familiarity with AI-enabled security tools, LLM-related risks, and emerging threats associated with enterprise AI adoption.

Benefits

• High-quality, low-deductible medical insurance.
• Low to no-cost dental and vision plans.
• 5 weeks of paid time off (plus almost a dozen paid holidays).
• Employer-funded retirement.
• Free tuition program.
• Parental leave.
• Mental health and wellbeing resources.

Compensation

The annual pay range for this position is $129,057.00 - $206,531.00. Actual offer will be based on skills, qualifications, experience and internal equity, in addition to relevant business considerations. We expect this position to be hired in the following target hiring range $142,610.00 - $192,943.00.