Browse by State Browse by Role Latest Postings

Deputy Chief Information Security Officer - #270015

Western Carolina University Cullowhee, NC

  1. Salary Not stated by the employer
  2. Employer Western Carolina University
  3. Location Cullowhee, NC
  4. Workplace On site
  5. Role Information Security Analyst
  6. Posted Aug 24, 2026
  7. Reference pa-35166
Deputy Chief Information Security Officer - #270015 at Western Carolina University, Cullowhee, NC
The primary location of this position is on-site in Cullowhee, NC. This position is designated as being exempt from the State of North Carolina Human Resources Act (EHRA).

The Deputy Chief Information Security Officer (Deputy CISO) reports to the Chief Information Security & Privacy Officer. The position provides senior operational and program leadership for the IT Security Office and serves as the principal delegate for assigned security matters. The Deputy CISO translates institutional security and privacy priorities into coordinated operations, supports continuity of leadership, and works across the Division of IT and the university to reduce technology risk.

The position leads or coordinates security governance, risk assessment, regulatory and standards compliance, security awareness, security operations oversight, and security review of technology projects and third-party services. The Deputy CISO advises technical and non-technical stakeholders, documents risk-based recommendations, tracks corrective actions, and escalates significant risks and incidents to the CISPO.

Description of Work
  • Technology risk assessments across university systems, business units, and third parties. This includes maintaining the enterprise risk register, developing assessment methodologies, and ensuring risks are documented with accountable owners and remediation plans.
  • Audit preparation and response, including internal audit engagements, external audits, and reviews conducted by the Office of the State Auditor. The Deputy CISO serves as the primary coordinator for audit evidence, response, and remediation tracking.
  • Regulatory compliance across the frameworks that apply to the university, including the FTC Safeguards Rule (GLBA), FERPA, UNC System policies, and applicable state and federal requirements. The Deputy CISO maintains the compliance mapping and reporting cadence.
  • The human risk program, including phishing simulations, security awareness training, and security communications to the university community.
  • The technology risk governance framework, including the development and maintenance of information security policies, standards, and control frameworks aligned to recognized industry frameworks such as NIST CSF and CIS Controls.
  • The Deputy CISO's work directly informs prioritization for the broader technology organization. The risk view produced by the function drives remediation sequencing, planning priorities, and investment decisions across IT.

Required Knowledge, Skills, and Abilities
  • Security leadership and operational judgment
  • Governance, risk, compliance, and control assessment
  • Incident coordination and decision support
  • Policy and procedure development
  • Third-party, software, and project security review
  • Clear executive, technical, and campus communication
  • Collaboration, consultation, and customer service
  • Planning, prioritization, documentation, and accountability
Apply on Western Carolina University's site You apply directly with the employer.