Manager- Information Systems Security (Network)

Georgia Tech prides itself on its technological resources, collaborations, high-quality student body, and its commitment to building an outstanding and diverse community of learning, discovery, and creation. We strongly encourage applicants whose values align with our institutional values, as outlined in our strategic plan. These values include academic excellence, diversity of thought and experience, inquiry and innovation, collaboration and community, and ethical behavior and stewardship. Georgia Tech has policies to promote a healthy work-life balance and is aware that attracting faculty may require meeting the needs of two careers.

About Georgia Tech

Georgia Tech is a top-ranked public research university situated in the heart of Atlanta, a diverse and vibrant city with numerous economic and cultural strengths. The Institute serves more than 45,000 students through top-ranked undergraduate, graduate, and executive programs in engineering, computing, science, business, design, and liberal arts. Georgia Tech's faculty attracted more than $1.4 billion in research awards this past year in fields ranging from biomedical technology to artificial intelligence, energy, sustainability, semiconductors, neuroscience, and national security. Georgia Tech ranks among the nation's top 20 universities for research and development spending and No. 1 among institutions without a medical school.

Georgia Tech's Mission and Values

Georgia Tech's mission is to develop leaders who advance technology and improve the human condition. The Institute has nine key values that are foundational to everything we do:

1. Students are our top priority.

2. We strive for excellence.

3. We thrive on diversity.

4. We celebrate collaboration.

5. We champion innovation.

6. We safeguard freedom of inquiry and expression.

7. We nurture the wellbeing of our community.

8. We act ethically.

9. We are responsible stewards.

Over the next decade, Georgia Tech will become an example of inclusive innovation, a leading technological research university of unmatched scale, relentlessly committed to serving the public good; breaking new ground in addressing the biggest local, national, and global challenges and opportunities of our time; making technology broadly accessible; and developing exceptional, principled leaders from all backgrounds ready to produce novel ideas and create solutions with real human impact.

The Office of Information Technology (OIT) provides information technology leadership and support to the Georgia Institute of Technology, working in partnership with academic and business units to meet the unique needs of a leading research university. OIT serves as the primary source of enterprise-wide information technology and telecommunications services in support of students, faculty, staff, and researchers.

Atlanta, Georgia (In-Person Work) Onsite

The Information Systems Security Manager in a people leader role is responsible for leading a team of information security specialists, driving the strategic direction of information systems security initiatives. This position emphasizes management and oversight by coordinating team efforts, promoting professional development, and ensuring compliance with both institutional and regulatory security standards.

Job Duty 1 -
Lead and manage a team of information systems security professionals by establishing strategic objectives, providing mentorship, and conducting performance evaluations to enhance team effectiveness.

Job Duty 3 -
Oversee the execution of security audits and assessments by coordinating team efforts to evaluate the effectiveness of information systems security measures and identify areas for improvement.

Job Duty 2 -
Develop and implement comprehensive information systems security policies and strategies that align with institutional goals and promote overall security culture.

Job Duty 4 -
Foster collaboration between departments to address information systems security issues and ensure alignment with overall objectives and institutional policies.

Job Duty 5 -
Monitor and analyze information systems security metrics and incidents to inform strategic decision-making and enhance the institution's security posture.

Job Duty 6 -
Prepare and present reports to senior leadership on the status of information systems security initiatives, including compliance metrics, challenges, and opportunities for improvement.

Job Duty 7 -
Mentor and develop team members by providing training opportunities and resources that enhance their skills in information systems security practices and technologies.

Job Duty 8 -
Serve as the primary liaison with external regulatory bodies and stakeholders to ensure compliance with information systems security regulations and standards.

Job Duty 9 -
Stay informed about emerging trends and technologies in information systems security by participating in professional organizations and attending relevant conferences to enhance the institution's capabilities.

Job Duty 10 -
Perform other job-related duties as assigned.

1. Develop and implement cybersecurity policies and procedures to protect the institution's information systems and data from unauthorized access and breaches.
2. Lead a team of cybersecurity professionals in monitoring network activity and identifying potential security threats and vulnerabilities.
3. Conduct regular security assessments and audits to evaluate the effectiveness of existing security measures and identify areas for improvement.
4. Manage incident response efforts, coordinating investigations of security breaches and implementing remediation plans to mitigate risks.
5. Provide cybersecurity training and awareness programs for faculty, staff, and students to promote a culture of security within the institution.
6. Stay informed about emerging cybersecurity threats and trends, adjusting strategies and practices to address new risks effectively.
7. Work with external partners and regulatory bodies to ensure compliance with relevant laws, regulations, and industry standards in cybersecurity.
8. Prepare and present reports on cybersecurity metrics, incidents, and initiatives to senior leadership, demonstrating the effectiveness of the institution's cybersecurity posture.
9. Collaborate with Information Technology and academic departments to ensure that all technology initiatives comply with cybersecurity standards and best practices.

Educational Requirements
Bachelor's or Master's Degree in related discipline or equivalent related experience.

Other Required Qualifications
Overnight travel required for project delivery; flexibility in on-site daily service delivery hours (due to client shift schedules, project requirements)

Required Experience
Six or more years of relevant experience - including three or more years of supervisory experience.

Additional Preferred Qualifications
Cisco Certified Network Professional University experience is preferred

Preferred Educational Qualifications
Master's degree in related discipline or equivalent, related experience.

• Significant hands-on experience designing, implementing, administering, and supporting enterprise cybersecurity technologies, including network security, identity and access management, endpoint security, cloud security, and security monitoring platforms.
• Strong experience with enterprise firewall architecture, design, administration, and policy management, including high-availability configurations, network segmentation, application-based controls, threat prevention, VPN technologies, and firewall lifecycle management.
• Hands-on experience administering and supporting Palo Alto Networks firewalls and Panorama, including security policies, NAT, App-ID, User-ID, threat prevention, URL filtering, GlobalProtect, logging, troubleshooting, and configuration management.
• Experience with Tufin or comparable security policy management platforms for firewall rule governance, policy analysis, change management, compliance, rule recertification, and optimization across complex enterprise environments.
• Experience designing and implementing network security controls, including network segmentation, firewall policies, secure remote access, microsegmentation, and Zero Trust architectures.
• Experience administering and supporting Network Access Control (NAC) solutions, preferably Aruba ClearPass or similar enterprise platforms.
• Strong experience with certificate management, Public Key Infrastructure (PKI), and certificate-based authentication.
• Hands-on experience with Zscaler technologies, including Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Client Connector.
• Strong understanding of network and security protocols and authentication technologies, including 802.1X, RADIUS, TACACS+, SAML, OAuth, OpenID Connect, and multi-factor authentication.
• Experience integrating cybersecurity technologies with Microsoft Entra ID (Azure AD), Identity & Access Management (IAM), MFA, SIEM, endpoint management, and endpoint detection and response (EDR) platforms.
• Experience with security monitoring, vulnerability management, threat detection, incident response, and security event analysis in a large enterprise environment.
• Demonstrated ability to evaluate security technologies and architectures, identify technical and operational risks, and develop appropriate security controls and remediation strategies.
• Experience developing and maintaining cybersecurity policies, technical standards, security baselines, procedures, firewall standards, and security architecture standards.
• Knowledge of cybersecurity frameworks and industry standards such as NIST Cybersecurity Framework (CSF), NIST 800-53, CIS Controls, ISO 27001, and Zero Trust principles.
• Experience supporting cybersecurity compliance and risk management activities involving applicable regulatory and contractual requirements.
• Demonstrated experience leading cybersecurity professionals and technical teams, including setting priorities, assigning work, mentoring staff, evaluating performance, and developing technical capabilities.
• Ability to lead complex cybersecurity initiatives involving networking, infrastructure, cloud, application, identity, and cybersecurity teams.
• Experience overseeing firewall and network security operations, including policy review, rule lifecycle management, change control, configuration standards, exception management, and coordination with network engineering teams.
• Experience managing security incidents and incident response activities, including technical investigation, containment, remediation, root-cause analysis, and communication with technical and executive stakeholders.
• Experience developing cybersecurity metrics, dashboards, risk indicators, and executive-level reporting to communicate security posture, operational performance, and areas of risk.
• Experience evaluating and managing cybersecurity vendors, consultants, technologies, and service providers.
• Ability to balance hands-on technical involvement with strategic planning, operational management, staff leadership, and governance responsibilities.

• CISSP Certified Information Systems Security Professional
• CISM Certified Information Security Manager
• Palo Alto Networks Certified Network Security Engineer (PCNSE) or equivalent Palo Alto Networks certification
• CCNP Security or CCIE Security
• Zscaler Certified Administrator (ZCCA) or equivalent Zscaler certification
• GIAC or other advanced security-focused certifications
• Certifications in Microsoft security, cloud security, identity management, or related technologies are also desirable.

• Strong leadership, communication, documentation, and presentation skills, with the ability to communicate complex cybersecurity topics to both technical and non-technical audiences.
• Demonstrated ability to manage multiple projects, operational priorities, and competing cybersecurity initiatives.
• Ability to build effective working relationships across Information Technology, networking, infrastructure, academic, administrative, compliance, and executive organizations.
• Experience working in large, complex enterprise environments with highly distributed technology infrastructure and enterprise-scale network security architectures.
• Higher education experience preferred, particularly experience supporting decentralized academic, research, and administrative technology environments.

$128,698 - $150,000, depending on experience and preferred skills

SKILLS
This job requires advanced knowledge of information technology service management including personnel, systems and hardware associated with unit assigned. Additionally, skills in technical and operational leadership/supervision, budget and project management; software development and operations management; quality assurance process and procedures; customer service; strategic planning; product evaluation and contract negotiation are required.

The University System of Georgia is comprised of our 25 institutions of higher education and learning as well as the System Office. Our USG Statement of Core Values are Integrity, Excellence, Accountability, and Respect. These values serve as the foundation for all that we do as an organization, and each USG community member is responsible for demonstrating and upholding these standards. More details on the USG Statement of Core Values and Code of Conduct are available in USG Board Policy 8.2.18.1.2 and can be found on-line at https://www.usg.edu/policymanual/section8/C224/#p8.2.18_personnel_conduct.

Additionally, USG supports Freedom of Expression as stated in Board Policy 6.5 Freedom of Expression and Academic Freedom found on-line at https://www.usg.edu/policymanual/section6/C2653.

The Georgia Institute of Technology (Georgia Tech) is an Equal Employment Opportunity Employer. The Institute is committed to maintaining a fair and respectful environment for all. To that end, and in accordance with federal and state law, Board of Regents policy, and Institute policy, Georgia Tech provides equal opportunity to all faculty, staff, students, and all other members of the Georgia Tech community, including applicants for admission and/or employment, contractors, volunteers, and participants in institutional programs, activities, or services. Georgia Tech complies with all applicable laws and regulations governing equal opportunity in the workplace and in educational activities.

Equal opportunity and decisions based on merit are fundamental values of the University System of Georgia ("USG") and Georgia Tech. Georgia Tech prohibits discrimination, including discriminatory harassment, on the basis of an individual's race, ethnicity, ancestry, color, religion, sex (including pregnancy), national origin, age, disability, genetics, or veteran status in its programs, activities, employment, and admissions. Further, Georgia Tech prohibits citizenship status, immigration status, and national origin discrimination in hiring, firing, and recruitment, except where such restrictions are required in order to comply with law, regulation, executive order, or Attorney General directive, or where they are required by Federal, State, or local government contract.

This is not a supervisory position.
This position does not have any financial responsibilities.
This position will not be required to drive.
This role is not considered a position of trust.
This position does not require a purchasing card (P-Card).
This position will not travel
This position does not require security clearance.

Successful candidate must be able to pass a background check. Please visit https://usg.policystat.com/policy/19298143/latest/