Title and Standard Job Description Library

• Job Summary: The job summary is a brief statement explaining the primary functions of the job, including its main purpose and overall goal.
  Develops and delivers a comprehensive information security and privacy program for the institution(s). Includes information in electronic, print, and other formats to assure that information created, acquired, or maintained by the university and its authorized users is used in accordance with its intended purpose to protect university information and its infrastructure from external or internal threats and to assure that campus complies with statutory and regulatory requirements regarding information access, security, and privacy.
• Job Responsibilities: Job responsibilities are the core job duties that people in this job usually perform.
  • Develops and implements an ongoing risk assessment program targeting enterprise information security and privacy matters. Recommends methods for vulnerability detection and remediation and oversees vulnerability testing
  • Coordinates the enterprise development of information security policies, standards, and procedures
  • Serves as the institution's compliance officer with respect to campus, state, and federal information security policies and regulations such as FERPA, HIPAA, Gramm-Leach-Bliley, DMCA, Wisconsin Statutes, Cyber Security Policy, USA Patriot Act, PCI, and other relevant policies and regulations
  • Develops and implements an incident reporting and response system to address institution security incidents (breaches). Responds to alleged policy violations or complaints from external parties or internal reporting
  • Serves as the official campus contact for information security, privacy, and copyright infringement incidents, including relationships with law enforcement entities
  • Serves as the campus contact for internal and external auditors and agencies, survey requests, and other relevant parties or requests on security/privacy matters
  • Develops, plans, and implements long- and short-term campus security goals, projects, and initiatives
  • Exercises supervisory authority, including hiring, transferring, suspending, promoting, managing conduct and performance, discharging, assigning, rewarding, disciplining, and/or approving hours worked of at least 2.0 full-time equivalent (FTE) employees
• Education: Education describes the minimum level of education that people in this job usually have. Education that is a preferred minimum is recommended for this job but not required. Relevant work experience can satisfy preferred minimum education. A hiring manager may include additional education requirements when recruiting for a position.
  Bachelor's Degree Preferred Minimum
• FLSA Status: Federal regulations determine Fair Labor Standards Act (FLSA) status. Employees who are non-exempt receive overtime pay when they work more than 40 hours in a week. Employees who are exempt do not receive overtime pay when they work more than 40 hours in a week.
  Exempt
• Institution Job: A job that has primary responsibilities that impact the majority or the entirety of the institution, or has significantly larger scope than the school/college/division in which it resides, and typically contains “(Inst)” in the job title or mentions “institution” or “enterprise” in a standard job description.
  Yes
• Required Supervisory Duty of at Least 2.0 Full-Time Equivalent (FTE) Employees: The supervisor directly oversees the equivalent of at least 2.0 FTE employees or indirectly oversees one or more supervisors. The supervisor has the authority to hire, transfer, suspend, promote, manage conduct and performance, discharge, assign, reward, and discipline employees. The supervisor typically reviews the work of employees and may approve employee timesheets.
  Yes
• Employee Category: Each employee category is unique in type of work performed, job security, benefits package, and/or ability to organize unions. Assignment to an employee category is based upon job title. Refer to the UW–Madison Employment Categories policy for more information.
  Limited
• Scaled Job: Jobs with the same title may have a different scope of work based on the school, college, or division where the work is performed. Scaling recognizes these differences based on the scope, impact, and complexity of the work performed. A scaled job title has multiple salary grades to align with market data. Learn more about job scaling.
  No
• Salary Range (Annual): Jobs in the same salary grade have similar pay in the market. Each salary grade has a salary range that includes a minimum and a maximum. A job is paid between the minimum and maximum of its salary grade. Learn more about UW's salary structure.
  31: $167,596-311,729
• Job Code: A job code identifies jobs in the university’s human resources system.
  IT079: Chief Information Security Officer (Inst)

Knowledges and Skills Learning Resources

Each standard job description is linked to a list of knowledges and skills. Knowledges and skills are optional resources to support employee learning and development. Visit the Knowledges and Skills Learning Resources website to learn more.

• Knowledges: Understanding of concepts.
  Learn more about knowledges and skills.
  • Administration and Management
  • Customer and Personal Service
  • Mathematics
  • Personnel and Human Resources
  • Production and Processing
• Skills: Capabilities and proficiencies developed through training and experience. Learn more about knowledges and skills.
  • Active Listening
  • Coordination
  • Monitoring
  • Reading Comprehension
  • Speaking