[Hiring] Vice President of Information Security and Infrastructure @American College of Education

Role Description

The Vice President of Information Security and Infrastructure reports to the Chief Information Officer and leads ACE’s enterprise cybersecurity, technology risk, infrastructure, and operational resilience efforts. This leader sets the direction for information security and infrastructure, establishes the policies and governance needed to manage risk, and ensures ACE has a secure, reliable, and resilient technology environment. The role advises the CIO, executive leadership, and appropriate Board committees on significant cyber risks, regulatory requirements, major incidents, risk decisions, and technology investments. The Vice President sets clear security expectations, brings the right leaders together to address risk, and ensures significant risks are understood and acted upon. The role balances security and resilience with business needs and cost, while ensuring technology continues to support the College’s growth and strategic priorities.

Qualifications

• Bachelor’s degree in information technology, cybersecurity, computer science, business, or a related discipline, or an equivalent combination of education and relevant executive experience.
• 15+ years of progressive technology and cybersecurity leadership experience, including at least 7 years leading enterprise infrastructure, cybersecurity, risk, or resilience functions and accountability for managers, senior technical professionals, and strategic service providers.
• Demonstrated success serving as a Vice President, Deputy Chief Information Security Officer, senior security executive, or technology executive with equivalent enterprise accountability for cybersecurity strategy, infrastructure, governance, risk, and resilience.
• Demonstrated experience developing and executing multi-year cybersecurity and infrastructure strategies, roadmaps, policies, standards, governance models, and investment plans with measurable business and risk outcomes.
• Deep working knowledge of NIST Cybersecurity Framework 2.0 and related security and control practices, with experience translating risk assessments and maturity evaluations into funded remediation portfolios.
• Demonstrated ownership of enterprise security policies, control frameworks, risk acceptance, exception governance, regulatory assurance, audit remediation, and executive or Board-level risk reporting.
• Experience directing material cybersecurity incident response or enterprise crisis exercises, including coordination with executive leadership, legal counsel, cyber insurance, digital forensics providers, communications, and managed security services.
• Strong experience with cloud-first and virtual-work environments, including Microsoft 365, Azure, Entra ID, Defender, Purview, Sentinel, Intune, networking, backup and recovery, monitoring, identity and access management, and service management, or comparable enterprise platforms.
• Demonstrated leadership of security operations, vulnerability management, data protection, third-party risk, security architecture, business continuity, disaster recovery, cyber recovery, and security awareness capabilities.
• Experience applying regulatory and contractual requirements relevant to higher education and digital operations, including FERPA, the GLBA Safeguards Rule, PCI DSS, privacy obligations, cyber insurance requirements, and breach-response requirements.
• Proven ability to communicate complex technology risk, incidents, investment priorities, and performance to the CIO, executive leadership, and governance bodies in clear business terms.
• Strong financial and commercial management skills, including budget ownership, business-case development, contract negotiation, vendor governance, service-level management, workforce planning, and technology cost optimization.
• Demonstrated ability to lead organizational change, establish institutional accountability, develop talent, and operate effectively across a distributed, virtual-first organization.
• CISSP or CISM certification required. CRISC, CCSP, CGEIT, ITIL 4, or relevant Microsoft cloud and security certifications are preferred.

Requirements

• Executive level communication skills. Must have exceptional communication, organization, and time management skills.
• Demonstrates self-reliance by meeting/exceeding workflow needs.
• Demonstrates positive attitude and motivation, concern for students, teamwork, and excellent time management skills.
• Follows established processes as outlined by organization and leadership.
• Completes assigned duties based on daily business needs and individual skill set.
• Consistently produces a high volume of quality work.
• Capable, adapts as needed, to work under pressure and meet tight deadlines.
• Proven ability to work independently with limited supervision and with other department personnel.
• Must support and embrace the College’s Impact mission to improve the people and communities we serve through our civic engagement initiatives.
• Must be "self-motivated" as well as creative and efficient in proposing solutions to complex, time-critical problems.
• Must be collaborative in driving decisions and a team-player.
• Strong analytical and problem-solving skills with a high attention to detail.
• Builds and maintains student satisfaction.
• Recognizes and anticipates student needs.

Benefits

• Medical, dental, & vision Insurance
• HSA and FSA options
• Paid parental leave
• Paid volunteer time
• Tuition reimbursement & reduction programs
• Generous PTO
• 401k and employer match
• Full-service wellness and EAP program
• Employee recognition and awards programs
• Employer paid life & AD&D insurance
• Short-term disability
• Employer paid long-term disability
• And more…