Information Security Officer

Salary: $91,000.00 Annually
Location : Yakima, WA
Job Type: Exempt Professional
Job Number: 23-122
Division: Technology Services
Opening Date: 12/13/2023
Closing Date: 1/5/2024 11:00 PM Pacific
Description
We invite you to consider joining Yakima Valley College (YVC), an innovative and equity-focused designated Hispanic Serving Institution that is committed to the pursuit of equitable student learning outcomes for its diverse students.
Our Mission Statement:
As a federally designated Hispanic-serving Institution residing on the traditional homelands of the 14 Confederated Tribes and Bands of the Yakama Nation, Yakima Valley College cultivates equity and a culture of innovative and inclusive teaching and learning.
Yakima Valley College serves all students holistically, supports all students' learning goals, and fosters achievement within career and educational pathways.
We strengthen our communities by providing opportunities for personal enrichment, economic mobility, and sociocultural engagement.
Yakima Valley College is accepting applications for an Information Security Officer (ISO) in the Administrative Services - Technology Services Department. This is a full-time exempt position, beginning salary is $91,000 per year, plus a full state benefits package.
The Technology Services Department provides facilities and technical support for students, faculty, and staff in various implementations of technology in support of institutional goals. Technology Services supports workstations and virtual desktops in various locations across the college district, physical and virtual servers, a campus-wide fiber backbone and wireless network, telephone and other communications systems, and multimedia/projection systems. Technology Services provides hardware and software configuration and support services, technical and end-user support, web application development, and data and integration services to help further the success of Yakima Valley College's students.
Reporting to the Director of Technology Services & Chief Information Officer (CIO), the Information Security Officer (ISO) position is charged with developing and managing campus wide Information Technology (IT) and data management practices to protect the integrity, availability, and confidentiality of YVC data and resources. Also, this position plays a key role in maintaining college operations.
This key leadership position serves as a cyber security expert and ambassador and provides training on essential IT security and data protection protocols. The ISO establishes policies and procedures for IT security and data protection, recommends actions to protect YVC information and IT infrastructure from threats, and ensures compliance with regulations regarding information access, use, security and privacy.
The position is an exempt position.
Essential Tasks
MINIMUM QUALIFICATIONS:

• Bachelor's degree in Computer Science, Information Management, Business Administration, Engineering, Project Management, or a related field.

Or an equivalent mix of education and experience that demonstrates the candidate meets all competency requirements for this position.

• Five or more years of relevant work experience designing, implementing and maintaining IT systems.
• Three or more years of management experience in IT services.
• Relevant IT security work experience demonstrating a strong understanding of IT security processes, technologies, standards, and best practices.
• Knowledge of network and server hardware, software and security tools.
• Working knowledge of current Information Security laws, accepted industry practice, and the relevant law enforcement community.
• Commitment to learning and applying best practices to ensure technology products and tools are fully accessible to all end users.
• Acceptance of the responsibility to promote the welfare and best interests of students and mission.
• A demonstrable understanding and acceptance of the mission, strategic objectives, and strategic plan of YVC.
• The ability to perform assigned duties in a manner consistent with applicable laws, regulations and goals of the institution, and community and technical college system.
• Demonstrated commitment to fostering and supporting a teaching, learning, and working environment that honors diversity, equity and inclusion.

PREFERRED QUALIFICATIONS:

• A current security/cybersecurity certification such as CompTIA Security+ or CompTIA CySA+.
• Knowledge of Information Security technology trends.
• Demonstrated leadership and communication in a sensitive area when judgment and discretion are paramount.

PHYSICAL REQUIREMENTS:

• Must be able to independently move equipment up to 50lbs & move equipment more than 50lbs with the assistance of others.
• Must be able to sit, stand, and walk for prolonged and considerable amounts of time.
• Must be able to routinely reach, stoop, bend, kneel and crouch while performing duties of the position.
• Must be able to climb ladders.
• Work is performed in a normal office environment.
• Frequent use of computers.
• Work directly with students/clients.
• Work involves constant interruptions.
• Must answer on demand questions by phone, in person, or electronically.

Qualifications
JOB PROFILE:

• Coordinate the development, implementation and maintenance of campus wide IT security policies, procedures, standards, and guidelines. Provide continuous evaluation and progress toward compliance with the Washington State Office of the Chief Information Officer (OCIO)'s IT security standards. Document and address issues of non-compliance. Act as a YVC representative to the IT Commission's IT Security Council.
• Under the direction and guidance of the CIO, work with and support end users, IT offices, data custodians, IT governance groups, IT leads, IT helpdesk, and YVC executives to facilitate processes that identify and evaluate risks, potential threats, vulnerabilities and impacts to YVC as a result of the use of IT systems. Assist in developing solutions.
• Conduct reviews to ensure that IT systems have current, effective, and quality security documentation in place. Ensure IT security plans are integrated into all stages of the system life cycle.
• Conduct periodic IT security self-assessments to evaluate the effectiveness of existing security controls and compliance with established policies and procedures including penetration tests, vulnerability tests and system code analysis.
• Facilitate Information Security committee under the direction and guidance of the CIO.
• Ensure a comprehensive independent IT security audit is performed.
• Monitor security initiatives and establish standards such as virus protection, security monitoring, intrusion detection, access control to facilities, and remote systems access. Coordinate resolution of security breach incidents.
• Work with the Technology Services department to select and coordinate the support of virus protection software for common platforms used by YVC. Investigate and identify solutions to viral infestation and damage.
• Work with Technology Services to facilitate processes that identify, track, and report on security patch management.
• Develop campus wide Information Security awareness and training programs for all YVC personnel to encourage greater system security and awareness of risks.
• Function as the YVC point of contact for all Information Security incidents/threats, establish and oversee incident handling procedures and report incidents to YVC leadership, Campus Security or law enforcement as appropriate.
• Provide guidance to ensure that Information Security is addressed in the development and acquisition process of information systems, security-related products and services, and database management.
• Work with Technology Services and Human Resources on the collection of confidential data regarding personnel investigations, litigation records holds and other related matters. Assist with analysis of data provided.
• Provide project management of IT projects as needed.
• Comply with campus policies, procedures and directives, state and federal regulations, orders and statutes and collective bargaining agreements.
• Support and advance the YVC strategic plan
• Perform other duties as assigned.

Job Level Competency Description

• Baseline understanding of principles and theory within area(s) of responsibility (gained through multiple years of progressive experience, training or formal education in area of assignment) and is developing depth of knowledge and practical application.
• Skilled in the diagnosis, troubleshooting and/or maintenance of IT systems.
• Learn to operate and maintain new technology; assist in transitions.
• Resolves problems requiring analysis and the discernment of the most suitable solution(s)/processes(s) available.
• Uses skills and abilities to complete routine tasks at the beginning, while growing toward completing tasks of increasing complexity.
• Uses basic understanding of the field to perform job duties; may need some guidance on job duties; applies learning to recommend options to address unusual situations.
• Competent to work on several phases of computer operations, but still needs instruction and guidance for other (more complex) phases.
• Participates in specialized projects under the direction of a higher-level IT professional.

Each technician plays a key role in the responsive and problem-solving team, while maintaining a positive and engaging attitude, contributing to the advancing support model in an ever-changing technology environment.
The successful candidate will be able to communicate security-related concepts to technical and non-technical stakeholders. This person will also be an innovative team player who ensures that YVC meets operational goals while adhering to IT security and data management best practices and laws.
Supplemental Information
SUPPLEMENTAL INFORMATION:
To apply for this position, you MUST submit a complete YVC Online Employment Application, and include the following REQUIRED attachments:

• A cover letter describing how you meet the qualifications of this position (a generic cover letter will not be accepted). The search committee should be able to easily "check off" each qualification asked for in the job description.
• A current resume (a resume will not substitute for the "work experience" section of the online application).
• Three (3) professional references (personal references do not count as professional).
• Unofficial transcripts for confirmation of degree and required for the fulfillment of the minimum qualifications (when applicable). The successful candidate will be required to submit official transcripts at the time of hire.
• Copy of Credentials or licenseas required for the fulfillment of the minimum qualifications
• Supplemental Questions - Your responses should provide examples and timelines in your education or experiences which gives evidence of each claim you make.

Please note: Failure to follow the above application instructions will lead to disqualification. Please do not include any attachments other than the ones requested above. E-mailed documents will not be accepted after the closing of the recruitment or in lieu of attaching your documents to the online application.
Employment Information: Those applicants invited to interview may be required to complete a skills test.
Candidates will be subject to a Criminal History Background Check as a condition for consideration of employment.
Due to an emergency proclamation by the Governor, all employees will be required to provide proof of COVID-19 vaccination as a condition of employment. Employees may request a medical or religious accommodation by contacting the Human Resources Department at 509-574-4670.
"In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire."
Yakima Valley College does not discriminate against any person on the basis of race, color, national origin, disability, sex, genetic information, or age in admission, treatment, or participation in its programs, services, and activities, or in employment. All inquiries regarding compliance should be directed to the Director of Human Resource Services, YVC, South 16th Ave. & Nob
Yakima Valley College's Annual Safety and Fire Report is available online
at containing mandated information about current campus policies concerning safety and security issues, required statistics, and other related information for the past three calendar years. To obtain a paper copy of the report, please call 509.574.4610.
Applicants with disabilities who require assistance with the recruitment process will be accommodated to the extent reasonably possible.
All positions are subject to funding.
Yakima Valley College offers a selection of health and retirement plans allowing you to take advantage of the plans that work for you. We also offer paid leave, development and career opportunities, and other compensation benefits. Benefit packages are a key component of our Total Compensation Model.
Insurance Benefits
Yakima Valley College offers medical (including vision), and dental. There are several medical plans with affordable monthly premiums that offer coverage throughout the state. Employees are also covered by basic life and long term disability insurance, with the option to purchase additional coverage amounts. To view premium rates, coverage choice in your area and how to enroll, please visit the
Retirement and Deferred Compensation
State Employees can elect to become members of the Washington Public Employees' Retirement System (PERS). New employees have the option of two employer contributed re...