Director of Information Technology and Cybersecurity

Department: College of Public Health

Classification: Administrative Faculty

Job Category: Administrative or Professional Faculty

Job Type: Full-Time

Work Schedule: Full-time (1.0 FTE, 40 hrs/wk)

Location: Fairfax, VA

Workplace Type: On Site Required

Sponsorship Eligibility: Not eligible for visa sponsorship

Salary: Salary commensurate with education and experience

Criminal Background Check: Yes

About the Department:

George Mason University’s College of Public Health prepares students to become leaders in advancing public health through academic excellence, innovative research, and community-focused practice. The College comprises five academic units and serves over 3,000 students through nationally recognized programs, including five undergraduate degrees, thirteen graduate degrees, and seven certificate offerings.

About the Position:

The Director of Information Technology and Cybersecurity (DITC) reports to the Chief Business Officer (CBO) of the College of Public Health. This role ensures reliability of the College’s IT operations and maintaining compliance with specialized IT certifications. The DITC plays a mission-critical role in supporting faculty, staff, and students by enabling efficient academic and research activities. Responsibilities include anticipating and responding to the College’s evolving technology needs, leading IT initiatives, serving on leadership committees as a liaison to central university administration, and collaborating with academic and administrative units to address security concerns and operational challenges.

Responsibilities:

• Executes a team-based strategy to minimize single-person dependencies for technology administration and management.
• Mentors and plans professional development of staff to strengthen functional and technical skills.
• Establishes and monitors team and individual goals to advance the units mission and ensures quality service delivery.
• Evaluates the team’s capacity and ensures alignment with strategic priorities. 
• Provides consultation to units regarding software platform needs and ensures readiness for Masons ASRB review process.
• Ensures technology implementations are managed with strong project management oversight with an eye toward continuous improvement.
• Provides divisional strategy and oversight for hardware technology investment, maintenance, replacement.
• Oversees ongoing development of team standard operating procedures.
• Oversees ongoing development and maintenance of functional and technical documentation to support continuity operations for technology platforms.
• Oversees compliance with Masons technology security standards for hardware and software deployed in division. 
• Drives a culture of information security compliance within ITS.
• Establishes and manages a “second line of defense” between ITS technical teams and auditors.
• Leads reviews of cybersecurity compliance across ITS.
• Coordinates audit response activities and manages communications with internal and external auditors.
• Ensures technology infrastructure, operations, and services comply with university policies and state/federal regulations.
• Identifies potential compliance risks and collaborates with IT Security and technical teams to implement remediations.
• Documents and manages corrective action plans for audit findings.
• Conducts annual reviews of ITS policies and procedures and coordinates necessary updates.
• Maintains the ITS Disaster Recovery Plan and coordinates annual effectiveness tests.
• Develops and maintains an Information Technology Risk Register. 
• Serves on interview or faculty committees as needed.
• Manages personnel or interns assisting with compliance-related duties.
• Supports temporary administrative functions within or outside ITS, as assigned by university leadership.  

Required Qualifications:

• Master’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or closely related field from an accredited institution is required with substantial directly related professional experience may be considered in exceptional cases.
• Progressive experience (typically 7+ years) in management and oversight of information technology systems, with senior leadership or director-level role (typically 3+ years).

Candidates must demonstrate:

• Proven experience in strategic IT planning, budgeting, and implementation.
  Demonstrated leadership in designing, maintaining, and securing enterprise-level technology infrastructures in an academic or comparable complex environment.
• Hands-on experience with cybersecurity policy development, risk management, and regulatory compliance (e.g., FERPA, GLBA, NIST, or HIPAA).
• Experience managing IT teams, projects, and vendors, with a strong emphasis on user-centered service delivery.
• Evidence of successful integration of emerging technologies and digital transformation initiatives.
• Demonstrated expertise in cybersecurity issues and protocols.
• Experience working in supervisory and project management roles.
• Experience working with research computing.
• Experience in a university setting.
• Significant experience in consequential information technology and cybersecurity assurance/assignments.
• Experience with database management and development, web design, and computer programming.
• Background managing Linux and Windows servers.
• Proficient in virtualization technologies and configuration management tools (e.g., KVM),
• In-depth knowledge of health information privacy standards, particularly HIPAA.
• Excellent organizational skills with consistent attention to detail.
• Proven ability to lead and coordinate multiple projects simultaneously in a dynamic environment.
• Strong understanding of federal and state privacy and security regulations, including compliance frameworks.
• Demonstrated proficiency in computing and web technologies.

Preferred Qualifications:

• Health Information Systems Certified (CPHIMS).
• Experienced in compliance and requirements for attaining/retaining Security Certification (CISSP or GIAC GSLC preferred).
• Experience with infrastructure monitoring technologies and with SIEM (OSSEC, Splunk preferred).
• Ability to develop and implement innovative technical solutions to support research projects.

Instructions to Applicants: 

For full consideration, applicants must apply for the Director of Information Technology and Cybersecurity (Req #10003376) at https://jobs.gmu.edu/. Complete and submit the online application to include three professional references with contact information (one of which is a most recent supervisor), and provide a cover letter expressing your interest in the position and detailing how your skills, experiences, and achievements position you as an ideal candidate, and a current resume for review.

Posting Open Date:  October 27, 2025

For Full Consideration, Apply by:  November 10, 2025

Open Until Filled:  Yes