Recommendations if you are developing a job announcement or description for your institution: - Review the sample CISO job description (below). Previous job postings from Princeton University and University of Albany are also available (in PDF format).
- Review the National Cybersecurity Workforce Framework published by NIST, which includes Sample Job Titles (pages 5-10).
- Review the 2009 ECAR Occasional Paper, "The Career of the IT Security Officer in Higher Education," which includes reporting lines, responsibilities, and skill sets, as well as the 2006 EDUCAUSE Review article, "Safeguarding Information Assets in Higher Education: The Role of the CSO." 2014 Higher Ed IT Workforce report.
- Consider alternative solutions, such as Bucknell University, Franklin & Marshall College, and Susquehanna University collaborating to create a joint CISO position among the three institutions. A non-higher ed example is Howard County, Maryland's HOCO CISO program, which provides "virtual" CISOs.
|