Re: Job Description of CISO

[Kris Monroe <kmonroe () ITHACA EDU>]

There was also an ECAR Occasional Paper titled "The Career of the IT Security Officer in Higher Education" that 
included Reporting Line, Responsibilities, Skill Sets, etc. It is still available at the following URL:
net.educause.edu/ir/library/pdf/ECP0901.pdf

I have found this useful in the past.
Regards,
-Kris
--
Stay Safe Online!
Visit ithaca.edu/ICinfosec for the latest cyber security tips.
--
Kris Monroe, CISSP, CISA, CISM
Information Security Officer
Office of Information Technology Services Job Hall

Ithaca College
953 Danby Rd. | Ithaca, NY 14850
607.274.1997 | 607.274.1484 fax
kmonroe () ithaca edu | ithaca.edu
Follow us: facebook.com/ICInfosec | twitter.com/IC_infosec



From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Valerie 
Vogel
Sent: Tuesday, February 12, 2013 6:31 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Job Description of CISO

HI Carlos,
Here is one example from our library: http://net.educause.edu/ir/library/pdf/csd3230.pdf

This question comes up on this list on a fairly regular basis. Here are a couple of brief examples, although the job 
descriptions no longer appear on the institutional websites:

*         
http://www.educause.edu/discuss/discussion-groups-related-educause-programs/security-discussion-group/chief-information-security-officer-position-ann

*         
http://www.educause.edu/discuss/discussion-groups-related-educause-programs/security-discussion-group/chief-security-officer-university-alaska

This article might provide you with some examples of roles and responsibilities that a CSO or CISO might fulfill at an 
institution: http://www.educause.edu/ero/article/safeguarding-information-assets-higher-education

Thank you,
Valerie

Valerie Vogel Program Manager

EDUCAUSE<http://www.educause.edu/>
Uncommon Thinking for the Common Good
direct: 202.331.5374 | main: 202.872.4200 | educause.edu<http://www.educause.edu/>

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Carlos 
Lobato
Sent: Tuesday, February 12, 2013 8:30 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Job Description of CISO


Hello All,



If your institution has a Chief Information Security Officer (CISO) position I would appreciate it if you would share 
with us a copy of the CISO's job description.



Thank you,



Carlos S. Lobato, CISA, CIA

IT Compliance Officer



New Mexico State University

Information and Communication Technologies

MSC 3AT PO Box 30001

Las Cruces, NM  88003



Phone (575) 646-5902

Fax (575) 646-5278