Mid Level Information Security Officer Jobs
Mid level information security officer jobs go to professionals ready to own security programs end to end, mentor junior analysts, and make risk decisions with limited oversight. Roles run across Technology & Software, Education, and Banking & Financial Services, with a notable mix of remote and hybrid positions, and employers like MTSI, GRVTY, and Tech Army hiring at this level now.
Find JobsOverview
Open roles7
Top stateNorth Carolina
Top employerMTSI
Top cityRaleigh, NC
Work type100% On-site
Top industryTechnology
Showing 5 of 7+ Mid Level Information Security Officer jobs
Deputy Chief Information Security Officer -
We won't show you this job again
Added 2mo ago
Western Carolina University
Deputy Chief Information Security Officer -
Cullowhee, North Carolina
Added 2mo ago
ISSO - Information Systems Security Officer
We won't show you this job again
Added 5mo ago
TECHFORGE Solutions
ISSO - Information Systems Security Officer
Dayton, Ohio
Added 5mo ago
Information Systems Security Officer Level 1
We won't show you this job again
Added 5mo ago
GRVTY
Information Systems Security Officer Level 1
Fort Meade, Maryland
Added 5mo ago
Information Systems Security Officer (ISSO)
We won't show you this job again
Added 5mo ago
MTSI
Information Systems Security Officer (ISSO)
Washington, District of Columbia
Added 5mo ago
Information Security Officer
We won't show you this job again
Added 7mo ago
Infojini Inc
Information Security Officer
Raleigh, North Carolina
Added 7mo ago
Added 2mo ago
Deputy Chief Information Security Officer -
Western Carolina University·Cullowhee, North Carolina
Job functions:
5+ yrs exp.
On-Site
Master's degree in business administration
Full Time
1,001-5,000 employees
Job Description
The primary location of this position is on-site in Cullowhee, NC. This position is designated as being exempt from the State of North Carolina Human Resources Act (EHRA).
The Deputy Chief Information Security Officer (Deputy CISO) reports to the Chief Information Security & Privacy Officer. The position provides senior operational and program leadership for the IT Security Office and serves as the principal delegate for assigned security matters. The Deputy CISO translates institutional security and privacy priorities into coordinated operations, supports continuity of leadership, and works across the Division of IT and the university to reduce technology risk.
The position leads or coordinates security governance, risk assessment, regulatory and standards compliance, security awareness, security operations oversight, and security review of technology projects and third-party services. The Deputy CISO advises technical and non-technical stakeholders, documents risk-based recommendations, tracks corrective actions, and escalates significant risks and incidents to the CISPO.
Description of Work
The Deputy Chief Information Security Officer (Deputy CISO) reports to the Chief Information Security & Privacy Officer. The position provides senior operational and program leadership for the IT Security Office and serves as the principal delegate for assigned security matters. The Deputy CISO translates institutional security and privacy priorities into coordinated operations, supports continuity of leadership, and works across the Division of IT and the university to reduce technology risk.
The position leads or coordinates security governance, risk assessment, regulatory and standards compliance, security awareness, security operations oversight, and security review of technology projects and third-party services. The Deputy CISO advises technical and non-technical stakeholders, documents risk-based recommendations, tracks corrective actions, and escalates significant risks and incidents to the CISPO.
Description of Work
- Technology risk assessments across university systems, business units, and third parties. This includes maintaining the enterprise risk register, developing assessment methodologies, and ensuring risks are documented with accountable owners and remediation plans.
- Audit preparation and response, including internal audit engagements, external audits, and reviews conducted by the Office of the State Auditor. The Deputy CISO serves as the primary coordinator for audit evidence, response, and remediation tracking.
- Regulatory compliance across the frameworks that apply to the university, including the FTC Safeguards Rule (GLBA), FERPA, UNC System policies, and applicable state and federal requirements. The Deputy CISO maintains the compliance mapping and reporting cadence.
- The human risk program, including phishing simulations, security awareness training, and security communications to the university community.
- The technology risk governance framework, including the development and maintenance of information security policies, standards, and control frameworks aligned to recognized industry frameworks such as NIST CSF and CIS Controls.
- The Deputy CISO’s work directly informs prioritization for the broader technology organization. The risk view produced by the function drives remediation sequencing, planning priorities, and investment decisions across IT.
Required Knowledge, Skills, and Abilities
- Security leadership and operational judgment
- Governance, risk, compliance, and control assessment
- Incident coordination and decision support
- Policy and procedure development
- Third-party, software, and project security review
- Clear executive, technical, and campus communication
- Collaboration, consultation, and customer service
- Planning, prioritization, documentation, and accountability
Minimum Qualifications
- Bachelor’s degree in cybersecurity, computer science, information systems, business analytics, or a related field.
- Five years of progressively responsible experience across multiple information security functions, such as governance, risk, compliance, security operations, incident response, identity and access management, infrastructure security, or third-party risk.
- Demonstrated experience coordinating complex security initiatives across technical teams and business units.
- Working knowledge of networking, systems administration, endpoint security, identity and access control, cloud or hosted services, vulnerability management, and incident response practices.
- Experience developing or implementing security policies, risk assessments, control documentation, audit responses, or remediation plans.
- Excellent oral, written, and interpersonal communication skills, including the ability to explain technical concepts and risk in non-technical terms.
- Strong analytical, organizational, and problem-solving skills; ability to manage concurrent priorities with appropriate attention to detail.
- Ability to obtain and maintain CISSP certification within eighteen months of appointment if not already certified.
Preferred Qualifications
- Master’s degree in cybersecurity, information systems, business administration, or a related field.
- More than seven years of progressively responsible information security experience, including program or team leadership.
- Current CISSP certification; additional relevant certification such as CISM, CRISC, GIAC, or a privacy credential.
- Experience in higher education, government, or another complex regulated environment.
- Experience with ISO 27002, ISO 27701, NIST Cybersecurity Framework, NIST security controls, PCI DSS, HIPAA, GLBA, or comparable requirements.
- Experience supporting security incidents, audits, executive briefings, third-party risk assessments, and risk-register governance.
Position Type
Permanent Full-Time
Number of Hours Per Week
40
Number of Months Per Year
12
Posting Text
Open Date
08/24/2026
Close Date
Open Until Filled
Yes
Special Instructions to Applicants
Application materials must be submitted online. Review of applications will begin immediately and will continue until a candidate has been selected for hire.
In order to complete the application, applicants must include:
For questions or additional information please contact matthewmartin@wcu.edu
In order to complete the application, applicants must include:
- a cover letter addressing qualifications as related to the job requirements
- a current resume
- a list of three recent (within past five years) professional references which include name, title, email, and relationship
For questions or additional information please contact matthewmartin@wcu.edu
Background/E-Verify
Final candidates are subject to criminal & sex offender background checks. Some vacancies also require credit or motor vehicle checks.
Western Carolina University uses E-Verify to confirm employment eligibility of all newly hired employees. To learn more about E-Verify, including your rights and responsibilities, please visit www.dhs.gov/E-Verify. Proper documentation of identity and employability are required at the time of employment.
Western Carolina University uses E-Verify to confirm employment eligibility of all newly hired employees. To learn more about E-Verify, including your rights and responsibilities, please visit www.dhs.gov/E-Verify. Proper documentation of identity and employability are required at the time of employment.
Credential Verification
All new employees are required to have listed credentials/degrees verified within 30 days of employment. All new employees who will be teaching are required to provide official transcripts within 30 days of employment. Transcripts should be provided for the highest earned degree and/or the degree which is being used to satisfy credential/qualification requirements.
EOE
Western Carolina University is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race; color; ethnicity; religion; sex; pregnancy; sexual orientation; gender identity or expression; national origin; age; disability; genetic information; political affiliation; National Guard or veteran status, consistent with applicable federal, state and local laws, regulations, and policies, and the policies of The University of North Carolina. Persons with disabilities requiring accommodations in the application and interview process please call (828) 227-7218 or email at jobs@email.wcu.edu.
University Safety
The Western Carolina University Annual Safety Report is available online at University Annual Safety Report or in hard-copy by request at the office of the Vice Chancellor for Student Affairs, 227 HFR Administration Building, Cullowhee, NC 28723 (828-227-7147) or the Office of University Police, 111 Camp Annex, Cullowhee, NC 28723 (828-227-7301). The report, required of all universities participating in Title IV student financial aid programs, discusses crime statistics, procedures for reporting suspicious or criminal activity, security, police authority, crime prevention strategies, university policies on substance abuse and sexual offenses, workplace violence and fire safety.
Western Carolina University
Deputy Chief Information Security Officer -
Cullowhee, North Carolina
Added 2mo ago1,001-5,000 employees
Job functions:
5+ yrs exp.
On-Site
Master's degree in business administration
Full Time
Job Description
The primary location of this position is on-site in Cullowhee, NC. This position is designated as being exempt from the State of North Carolina Human Resources Act (EHRA).
The Deputy Chief Information Security Officer (Deputy CISO) reports to the Chief Information Security & Privacy Officer. The position provides senior operational and program leadership for the IT Security Office and serves as the principal delegate for assigned security matters. The Deputy CISO translates institutional security and privacy priorities into coordinated operations, supports continuity of leadership, and works across the Division of IT and the university to reduce technology risk.
The position leads or coordinates security governance, risk assessment, regulatory and standards compliance, security awareness, security operations oversight, and security review of technology projects and third-party services. The Deputy CISO advises technical and non-technical stakeholders, documents risk-based recommendations, tracks corrective actions, and escalates significant risks and incidents to the CISPO.
Description of Work
The Deputy Chief Information Security Officer (Deputy CISO) reports to the Chief Information Security & Privacy Officer. The position provides senior operational and program leadership for the IT Security Office and serves as the principal delegate for assigned security matters. The Deputy CISO translates institutional security and privacy priorities into coordinated operations, supports continuity of leadership, and works across the Division of IT and the university to reduce technology risk.
The position leads or coordinates security governance, risk assessment, regulatory and standards compliance, security awareness, security operations oversight, and security review of technology projects and third-party services. The Deputy CISO advises technical and non-technical stakeholders, documents risk-based recommendations, tracks corrective actions, and escalates significant risks and incidents to the CISPO.
Description of Work
- Technology risk assessments across university systems, business units, and third parties. This includes maintaining the enterprise risk register, developing assessment methodologies, and ensuring risks are documented with accountable owners and remediation plans.
- Audit preparation and response, including internal audit engagements, external audits, and reviews conducted by the Office of the State Auditor. The Deputy CISO serves as the primary coordinator for audit evidence, response, and remediation tracking.
- Regulatory compliance across the frameworks that apply to the university, including the FTC Safeguards Rule (GLBA), FERPA, UNC System policies, and applicable state and federal requirements. The Deputy CISO maintains the compliance mapping and reporting cadence.
- The human risk program, including phishing simulations, security awareness training, and security communications to the university community.
- The technology risk governance framework, including the development and maintenance of information security policies, standards, and control frameworks aligned to recognized industry frameworks such as NIST CSF and CIS Controls.
- The Deputy CISO’s work directly informs prioritization for the broader technology organization. The risk view produced by the function drives remediation sequencing, planning priorities, and investment decisions across IT.
Required Knowledge, Skills, and Abilities
- Security leadership and operational judgment
- Governance, risk, compliance, and control assessment
- Incident coordination and decision support
- Policy and procedure development
- Third-party, software, and project security review
- Clear executive, technical, and campus communication
- Collaboration, consultation, and customer service
- Planning, prioritization, documentation, and accountability
Minimum Qualifications
- Bachelor’s degree in cybersecurity, computer science, information systems, business analytics, or a related field.
- Five years of progressively responsible experience across multiple information security functions, such as governance, risk, compliance, security operations, incident response, identity and access management, infrastructure security, or third-party risk.
- Demonstrated experience coordinating complex security initiatives across technical teams and business units.
- Working knowledge of networking, systems administration, endpoint security, identity and access control, cloud or hosted services, vulnerability management, and incident response practices.
- Experience developing or implementing security policies, risk assessments, control documentation, audit responses, or remediation plans.
- Excellent oral, written, and interpersonal communication skills, including the ability to explain technical concepts and risk in non-technical terms.
- Strong analytical, organizational, and problem-solving skills; ability to manage concurrent priorities with appropriate attention to detail.
- Ability to obtain and maintain CISSP certification within eighteen months of appointment if not already certified.
Preferred Qualifications
- Master’s degree in cybersecurity, information systems, business administration, or a related field.
- More than seven years of progressively responsible information security experience, including program or team leadership.
- Current CISSP certification; additional relevant certification such as CISM, CRISC, GIAC, or a privacy credential.
- Experience in higher education, government, or another complex regulated environment.
- Experience with ISO 27002, ISO 27701, NIST Cybersecurity Framework, NIST security controls, PCI DSS, HIPAA, GLBA, or comparable requirements.
- Experience supporting security incidents, audits, executive briefings, third-party risk assessments, and risk-register governance.
Position Type
Permanent Full-Time
Number of Hours Per Week
40
Number of Months Per Year
12
Posting Text
Open Date
08/24/2026
Close Date
Open Until Filled
Yes
Special Instructions to Applicants
Application materials must be submitted online. Review of applications will begin immediately and will continue until a candidate has been selected for hire.
In order to complete the application, applicants must include:
For questions or additional information please contact matthewmartin@wcu.edu
In order to complete the application, applicants must include:
- a cover letter addressing qualifications as related to the job requirements
- a current resume
- a list of three recent (within past five years) professional references which include name, title, email, and relationship
For questions or additional information please contact matthewmartin@wcu.edu
Background/E-Verify
Final candidates are subject to criminal & sex offender background checks. Some vacancies also require credit or motor vehicle checks.
Western Carolina University uses E-Verify to confirm employment eligibility of all newly hired employees. To learn more about E-Verify, including your rights and responsibilities, please visit www.dhs.gov/E-Verify. Proper documentation of identity and employability are required at the time of employment.
Western Carolina University uses E-Verify to confirm employment eligibility of all newly hired employees. To learn more about E-Verify, including your rights and responsibilities, please visit www.dhs.gov/E-Verify. Proper documentation of identity and employability are required at the time of employment.
Credential Verification
All new employees are required to have listed credentials/degrees verified within 30 days of employment. All new employees who will be teaching are required to provide official transcripts within 30 days of employment. Transcripts should be provided for the highest earned degree and/or the degree which is being used to satisfy credential/qualification requirements.
EOE
Western Carolina University is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race; color; ethnicity; religion; sex; pregnancy; sexual orientation; gender identity or expression; national origin; age; disability; genetic information; political affiliation; National Guard or veteran status, consistent with applicable federal, state and local laws, regulations, and policies, and the policies of The University of North Carolina. Persons with disabilities requiring accommodations in the application and interview process please call (828) 227-7218 or email at jobs@email.wcu.edu.
University Safety
The Western Carolina University Annual Safety Report is available online at University Annual Safety Report or in hard-copy by request at the office of the Vice Chancellor for Student Affairs, 227 HFR Administration Building, Cullowhee, NC 28723 (828-227-7147) or the Office of University Police, 111 Camp Annex, Cullowhee, NC 28723 (828-227-7301). The report, required of all universities participating in Title IV student financial aid programs, discusses crime statistics, procedures for reporting suspicious or criminal activity, security, police authority, crime prevention strategies, university policies on substance abuse and sexual offenses, workplace violence and fire safety.
See All 7 Mid Level Information Security Officer Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsMid Level Information Security Officer Job Market
Who's Hiring
G
Top Industries Hiring
- Technology & Software
- Education
- Banking & Financial Services
- Consulting & Professional Services
Mid Level Information Security Officer Jobs: Frequently Asked Questions
How do I get a mid level information security officer job?
Highlight ownership rather than just participation: applications that show you led a vulnerability assessment, drove a compliance initiative, or built a security policy from scratch stand out at this level. Tailor your resume to demonstrate independent judgment, such as how you identified and remediated a real threat with measurable results. Certifications like CISSP, CISM, or Security+ reinforce your readiness for expanded responsibility.
Which companies hire mid level information security officers?
Companies hiring mid level information security officers right now include MTSI, GRVTY, and Tech Army, based on current listings on Migrate Mate as of November 2026. Hiring at this level comes from a wide range of organizations, including large enterprises building out dedicated security teams and mid-size firms looking for professionals who can operate with significant autonomy.
Are there remote mid level information security officer jobs?
Yes, though availability varies by employer and industry. About 0% of mid level information security officer openings are remote or hybrid as of November 2026, reflecting how much security work can be performed without being on-site. Roles tied to regulated industries or government contracts are more likely to require in-person presence due to compliance requirements.
How do I move up to a mid level information security officer role?
The path from entry level to mid level in information security runs through demonstrated ownership of real work, not just task completion. Build depth in at least one domain, such as incident response, cloud security, or compliance, and seek out projects where you are accountable for outcomes. Earning a recognized certification and contributing to post-incident reviews or policy updates signals that you are ready for greater scope.
Which industries hire the most mid level information security officers?
Mid Level information security officer roles concentrate in Technology & Software, Education, and Banking & Financial Services, based on current listings on Migrate Mate as of November 2026. These sectors drive hiring at this level because they face significant regulatory pressure, handle sensitive data at scale, or operate critical infrastructure that requires experienced security professionals to manage risk programs with real authority.