Director of Information Security, Wharton School

at  University of Pennsylvania

JOB DESCRIPTION SUMMARY

Founded in 1881 as the world’s first collegiate business school, the Wharton School of the University of Pennsylvania is shaping the future of business by incubating ideas, driving insights, and creating leaders who change the world. With campuses in Philadelphia and San Francisco, Wharton has over 850 staff, a faculty population of more than 235 renowned professors, and 5,000 undergraduate, MBA, executive MBA, and doctoral students. Each year, 13,000 professionals worldwide advance their careers through Wharton Executive Education’s individual, company-customized, and online programs. More than 104,000 Wharton alumni form a powerful global network of leaders who transform business every day. Wharton is home to a diverse staff population representing a rich array of backgrounds, expertise, and cultures. To learn more, visit www.wharton.upenn.edu.

JOB DESCRIPTION

Wharton’s Information Security Office is searching for a Director of Information Security to join our Information Security Team. Reporting to Wharton’s Chief Information Security Officer this position is responsible for leadership and management of cloud security, security architecture, security engineering, Identity & Access management, DevSecOps, and other key areas of information security for the Wharton School. The Director will play a privately role in protecting the University’s information assets and technology infrastructure from cyber threats, ensuring compliance with regulatory requirements, and fostering a culture of security across the school. The ideal candidate is a leader, self-starter, organized, and passionate about information security. You are an innovative, self-motivated team player, and a leader who will be able to educate, mentor, provide guidance, and drive a strategic secure architecture practices throughout the School. Your efforts will strengthen the risk efforts and overall environment at the largest business school in the world.

QUALIFICATIONS:

IT Director:

• Bachelor’s Degree
• 3-5 years experience as a senior level professional supporting Information Security functions; 5-7+ years overall experience preferred
• Deep Technical expertise in cloud development, cloud infrastructure and services, and security operations in the cloud, coupled with a broad understanding of the security and information technology landscape.
• Significant technical depth in cloud security (AWS, GCP, Azure, etc.), network security, and security engineering
• Demonstrated expertise in cloud security, security architecture, IAM, and DevSecOps.
• Demonstrated knowledge of Cybersecurity frameworks (e.g. NIST 800-37, 800-171, 800-53, 35, ISO 27001, CIS 18, etc.)
• Experience with IAM, information security tools/solutions, technologies, and strategies (e.g Grouper, Sailpoint, OAuth 2.0, SAML, Shibboleth, LDAP, Zero Trust, etc)
• Strong communication skills and ability to synthesize complex topics to varied audiences
• Strong leadership and team management skills, with a proven ability to mentor and develop talent
• Professional security certification (e.g. CISSP, CISM, or equivalent) is highly desirable.

IT Technical Director:

• Bachelor’s Degree
• 5-7 years experience as a senior level professional supporting Information Security functions; 7-10+ years overall experience preferred
• Deep Technical expertise in cloud development, cloud infrastructure and services, and security operations in the cloud, coupled with a broad understanding of the security and information technology landscape.
• Significant technical depth in cloud security (AWS, GCP, Azure, etc.), network security, and security engineering
• Demonstrated expertise in cloud security, security architecture, IAM, and DevSecOps.
• Demonstrated knowledge of Cybersecurity frameworks (e.g. NIST 800-37, 800-171, 800-53, 35, ISO 27001, CIS 18, etc.)
• Experience with IAM, information security tools/solutions, technologies, and strategies (e.g Grouper, Sailpoint, OAuth 2.0, SAML, Shibboleth, LDAP, Zero Trust, etc)
• Strong communication skills and ability to synthesize complex topics to varied audiences
• Strong leadership and team management skills, with a proven ability to mentor and develop talent
• Professional security certification (e.g. CISSP, CISM, or equivalent) is highly desirable.

SPECIAL REQUIREMENTS

Background check required after a conditional job offer is made. Consideration of the background check will be tailored to the requirements of the job.

Please refer the Job description for details