Information Security and Data Privacy Officer

Informal Information Security and Data Privacy Officer for Harvard SEAS, leading security posture measurements, compliance with policies and regulations, and advising faculty, staff, researchers, and students on secure practices. Responsibilities include designing and operating a school-wide information security and data privacy program; coordinating with SEAS Computing Operations and Applications Development teams to maintain secure infrastructure and applications; raising awareness and providing training on information security and data privacy; advising on secure records retention options; leading incident response in collaboration with University PrivSec and HUIT; establishing standard operating procedures for monitoring and alerting tools (e.g., Tenable, LogicMonitor, Splunk, CrowdStrike); managing an inventory of SEAS sensitive data; assessing infrastructure for weaknesses; presenting security requirements to ensure secure workflows and compliance; collaborating with university partners to set standards and best practices. Working conditions include office environment with hybrid work arrangements. Basic qualifications include minimum seven years of post-secondary education or relevant experience, strong communication, organizational, and teamwork skills, and knowledge of Linux/Windows administration, networking, and security concepts; preferred certifications (CISSP, CISA/CISM, GIAC) and Harvard IT Academy Foundation course; 35-hour work week; visa sponsorship not available.