{"id":3551341,"url":"https://alion.io/job/aui-division-head-information-security","title":"Division Head, Information Security","company":{"id":1848852,"name":"AUI","domain":"aui.edu","url":"https://alion.io/company/aui-edu","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Dayforce","truth_index":{"grade":"A","score":100,"open_postings":7,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":34,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Albuquerque, United States","United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":130000,"max":160000,"currency":"USD","period":"year","gross":null,"usd_annual":160000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Linux","optional":false},{"name":"NIST CSF","optional":false}],"status":"live","first_seen_at":"2026-10-30T06:00:00Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-11-03T03:27:43Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"J\nPosition Description:\n\nPosition Summary\nThe National Radio Astronomy Observatory (NRAO) is a prestigious research and development organization that plays a vital role in the study of the universe. Associated Universities, Inc. (AUI) is a nonprofit organization that manages and operates the NRAO under a cooperative agreement with the National Science Foundation. The Observatory is a hub for technological and scientific collaboration, operating state-of-the-art radio telescope facilities for use by the international scientific community. The Observatory has been instrumental in the study of black holes, galaxies, and the early universe.\n\nNRAO is seeking an experienced information security professional or chief information security officer (CISO) for our Division Head, Information Security opportunity. The Division Head (DH) provides strategic, operational, and technical leadership for the National Radio Astronomy Observatory's enterprise information security program. Reporting directly to the Deputy Chief Information Officer, the DH is responsible for establishing, implementing, and sustaining a comprehensive cybersecurity strategy that protects the Observatory's scientific, operational, and enterprise technology environments while enabling the continued advancement of its scientific mission.\n\nThe DH will lead a significant transformation of the Observatory's information security capabilities, addressing existing security vulnerabilities, reducing the organization's exposure to cyber threats, and establishing the foundational security processes, technologies, governance structures, and operational disciplines necessary to achieve a mature and sustainable cybersecurity posture. This position requires a leader capable of building and modernizing security capabilities in an environment where critical security controls, operational processes, and supporting technologies are either immature, inconsistently implemented, or not yet established.\n\nThis position demands more than traditional policy oversight or compliance administration. The DH must possess the technical credibility to engage directly with infrastructure engineers, network architects, system administrators, scientific computing specialists, and application development teams to understand complex security exposures and develop practical, effective remediation strategies. Equally important, the successful candidate must demonstrate the organizational leadership necessary to build a sustainable cybersecurity function, establish accountability across distributed technology teams, and guide meaningful cultural and operational change.\n\nThis position will be based in Albuquerque, NM, Socorro, NM, Charlottesville, VA or Green Bank, WV. For well-qualified candidates, a remote work arrangement may be considered.\n\nWhat You Will be Doing\nThe DH reports directly to the Deputy Chief Information Officer and serves as the Observatory's senior leader responsible for enterprise cybersecurity strategy, governance, risk management, and security operations.\n\nThe DH is expected to work collaboratively with the Associate Director of Data Management and Software, Deputy CIO, technology architects, infrastructure engineering, Science IT, and other organizational stakeholders to establish security requirements and coordinate their implementation.\n\nThe position is responsible for defining cybersecurity policies, standards, control requirements, and risk management processes, while partnering with the appropriate technology owners to implement and maintain those controls.\n\nThe DH will provide regular cybersecurity posture assessments, material risk reports, remediation progress updates, and investment recommendations to the Deputy CIO and other designated Observatory leadership. The duties and responsibilities of the DH will include, but are not limited to:\n\nLead the transformation of the Observatory's cybersecurity posture by identifying and addressing systemic security weaknesses, architectural vulnerabilities, immature operational processes, and gaps in security technologies and controls.\nDevelop, implement, and maintain a comprehensive enterprise information security strategy aligned with the Observatory's scientific mission, organizational priorities, and technology modernization initiatives.\nEstablish an enterprise cybersecurity operating model defining security functions, processes, responsibilities, accountability, service delivery expectations, and collaboration with other technology organizations.\nBalance the need for effective cybersecurity controls with the Observatory's requirements for scientific openness, high-performance computing, external collaboration, and operational flexibility.\nDevelop, maintain, and enforce cybersecurity policies, standards, procedures, and technical control requirements across the Observatory.\nDevelop governance mechanisms for reviewing the security implications of technology acquisitions, infrastructure modernization, software development, and scientific computing initiatives.\nEnsure cybersecurity requirements are integrated into technology architecture standards, operational procedures, procurement activities, and project delivery \nOther duties may be assigned.\n\nWork Environment\nThe successful candidate will join a team of professionals engaged in research and development in the fields of science, engineering, software development, and education. Work is typically performed in a research or development environment. Must be able to operate a personal computer. Occasional travel (domestic and international) may be required.\n\nWho You Are:\n\nEducation\nA Bachelor’s degree in in Cybersecurity, Information Assurance, Computer Science, Engineering, or a related discipline; highly relevant experience may be considered in lieu of a Bachelor's degree.\n\nExperience\nMinimum seven years of extensive technical knowledge and experience directing staff in the support of scientific or technical research. \n\nRequired Skills, Competencies and Experience\nSecurity Governance and Risk Management\nComprehensive understanding of NIST CSF, and other recognized cybersecurity standards and control frameworks.\nExperience establishing enterprise security policies, control standards, risk assessment processes, and compliance programs.\nExperience conducting cybersecurity maturity assessments and translating findings into prioritized remediation initiatives.\nDemonstrated ability to develop risk-based security investment strategies and measurable program improvement objectives.\n\nSecurity Operations\nExperience establishing or leading security operations and incident response capabilities.\nExperience developing incident response procedures, operational playbooks, and security monitoring standards.\nDemonstrated ability to coordinate technical remediation activities across multiple engineering and operations teams.\nLeadership and Organizational Transformation\nDemonstrated ability to lead significant cybersecurity improvement initiatives in organizations with immature or inconsistently implemented security controls.\nStrong organizational change management, stakeholder engagement, and cross-functional leadership skills.\nAbility to establish governance and accountability while maintaining productive working relationships with scientific and technical communities.\nExperience managing budgets, vendor relationships, technology investments, and multidisciplinary security teams.\n\nThe following are highly preferred:\nProfessional certifications such as CISSP, CISM, CISA, CRISC, or equivalent advanced cybersecurity credentials.\nExperience serving as a CISO, Deputy CISO, Director of Information Security, or equivalent cybersecurity executive.\nExperience developing or transforming cybersecurity programs within research institutions, national laboratories, universities, federally funded research organizations, or other scientific computing environments.\nFamiliarity with the cybersecurity challenges associated with high-performance computing, scientific instrumentation, research networks, and large-scale data processing.\nExperience securing Linux-intensive infrastructure environments and open-source technology ecosystems.\nFamiliarity with research and education identity federation, distributed authentication, and scientific collaboration platforms.\nFamiliarity with federal cybersecurity requirements, contractual security obligations, and security expectations applicable to federally funded research organizations.\nExperience developing cybersecurity metrics, executive scorecards, and security maturity reporting frameworks.\nAdditional Requirement\n\nObservatory employees must be authorized to work in the United States. The Observatory presently cannot sponsor H-1B Visas for this position.\n\nTotal Rewards:\n\nCompensation\nThe starting salary of this position is between $130,000 and $160,000. Factors which may affect starting pay within this range may include; education, experience, skills, competencies, other qualifications of the successful candidate, as well as internal equity and labor market conditions.\n\nBenefits:\nAssociated Universities, Inc (AUI) offers a comprehensive benefits package addressing the needs of employees and their families with most benefits beginning on the first day of employment, subject to eligibility requirements. AUI provides:\nExcellent paid time off (13 holidays, annual accrual of up to 24 vacation days)\nMedical, dental and vision plans are effective on the first day of employment.\nAUI’s retirement benefit contributes an amount equal to 10 percent of a qualified participant’s base pay with no required employee contribution.\nClick Total Rewards for more information.\n\nApplication Instructions:\n\nSelect the “Apply” button above. Please be prepared to upload your current CV/Resume and a cover letter describing interest and suitability for the position.\n\nEqual Opportunity Employer Statement:\n\nAUI is an equal opportunity employer. To view our complete statement, please visit https://public.nrao.edu/careers/. If you require reasonable accommodation for any part of the application or hiring process, you may submit your request by sending an email to . PM20","description_format":"text","description_chars":10193,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-30T22:51:27Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":34,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-11-02T06:13:15Z"},"pay":{"stated_usd_annual":160000,"is_top_pay":false},"html_url":"https://alion.io/job/aui-division-head-information-security","json_url":"https://alion.io/job/aui-division-head-information-security.json","meta":{"generated_at":"2026-11-03T04:19:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5883,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1848852},"rest":"https://alion.io/mcp/rest/get_company?id=1848852"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faui-division-head-information-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faui-division-head-information-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faui-division-head-information-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/aui-division-head-information-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faui-division-head-information-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3551341}},{"tool":"search_jobs","arguments":{"company":"aui.edu","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3551341},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}