How to Apply
A cover letter and resume are important submissions for the hiring team to get a sense of your experience. In the cover letter, in one page or less, please let us know how this role aligns with your career aspirations and skills. Submit both a cover letter and resume as one file.
Competitive salary available based on qualifications, experience and education of the selected candidate.
Job Summary:
Information and Technology Services (ITS) Information Assurance is seeking a supervisor to lead the Responsible Information Security for Campus (RISC) and Disaster Recovery Planning teams. The supervisor will lead staff members who help University of Michigan units understand and meet their responsibilities for protecting university information and systems and planning for disruptions to critical services.
The RISC team works directly with campus units to conduct security risk assessments, provide security consultation, review third-party services, answer questions, and deliver presentations and outreach. The Disaster Recovery Planning group works with ITS service owners to develop and maintain plans for restoring services after a disruption.
This position combines day-to-day staff supervision with hands-on leadership of campus-facing services. The supervisor will set priorities, develop staff, maintain strong relationships with campus partners, and improve the timeliness, consistency, and impact of the teams' work. They will help ensure that risks identified through assessments are clearly communicated, tracked, and followed through to resolution.
Positions that are eligible for hybrid or mobile/remote work mode are at the discretion of the hiring department. Work agreements are reviewed annually at a minimum and are subject to change at any time, and for any reason, throughout the course of employment. Learn more about the work modes.
Who we are:
Information and Technology Services (ITS) supports U-M faculty, researchers, staff, and students in their use of technology to teach, learn, research, and work, and be leaders in their fields. We are dedicated to creating cohesive digital experiences and promoting university wide innovations. ITS's mission is to be trusted enablers of technology for the U-M community. ITS works together to provide cohesive digital experiences and seamless support to the U-M community. For more information about ITS, visit: https://its.umich.edu/about
Responsibilities:
Team leadership and operations
- Supervise, coach, and develop staff across the RISC and Disaster Recovery Planning functions. Assign and prioritize work, provide regular feedback, conduct performance reviews, support professional development, and participate in hiring.
- Manage incoming requests and team workloads to provide timely, consistent service. Establish clear expectations for response times, work quality, documentation, and communication with campus partners.
- Identify opportunities to improve workflows, use team capacity effectively, and report on service demand, progress, and outcomes.
- Provide input to Information Assurance leadership on staffing needs, service priorities, and budget planning.
Security consultation and campus engagement
- Guide the team's security risk assessments and consultations with campus units. Help staff communicate findings in practical terms and work with stakeholders to track and address identified risks.
- Lead and improve security review processes for third-party services and contracts, collaborating with university teams such as Central Procurement and the Office of General Counsel to identify risks, ensure requirements are met, and support informed purchasing decisions.
- Build productive relationships with campus units and help them understand their role in the university's shared responsibility for security.
- Support presentations, educational outreach, and ongoing conversations with units about security risks, good practices, and available resources.
- Bring feedback and emerging concerns from campus partners to Information Assurance leadership to inform service improvements and security priorities.
- Provide subject-matter expertise and content input into the development, review, and continuous improvement of cybersecurity training courses to ensure content reflects current threats, university policies, and established security standards.
Disaster recovery planning and service coordination
- Supervise the Disaster Recovery Planning service, including coordination with units to develop, review, and maintain plans for critical services. Ensure service is following service governance lifecycle processes.
- Connect security consultations and campus engagement with opportunities to strengthen disaster recovery planning.
- Coordinate with other ITS and university teams on initiatives that depend on clear communication, effective service management, and broad campus engagement.
Required Qualifications:
- Bachelor's degree in cybersecurity or a related field..
- At least six years of related IT or information security experience involving customer service, confidentiality, independent judgment, organization, and the ability to manage competing priorities.
- At least two years of supervisory or management experience that includes staff mentoring, work assignment, performance feedback, career development, and/or team building.
- Experience conducting or leading security risk assessments, security consultations, or comparable work that helps organizations identify and address information security risks.
- Experience providing security services in higher education or another large, decentralized organization.
- Experience with disaster recovery planning or business continuity planning.
- Experience reviewing the security of third-party vendors or services.
- Experience working directly with stakeholders to understand their needs, explain security responsibilities, and develop practical approaches to reducing risk.
- Experience managing student or intern workers.
- Demonstrated ability to improve team processes and service delivery, including prioritizing requests, tracking work, and following up on identified issues.
- Ability to build collaborative relationships across teams and lead staff through changing priorities.
- Experience leading campus outreach, security presentations, or a broadly used security education service.
- Familiarity with information security frameworks, university data protection requirements, and the shared responsibility model.
- Strong written and verbal communication skills, including the ability to present security topics to audiences with different levels of technical knowledge.
Desired Qualifications:
Master's degree in cybersecurity, or related field.
Benefits at the University of Michigan:
In addition to a career filled with purpose and opportunity, The University of Michigan offers a comprehensive benefits package to help you stay well, protect yourself and your family and plan for a secure future. Benefits include:
- Generous time off
- A retirement plan that provides two-for-one matching contributions with immediate vesting
- Many choices for comprehensive health insurance
- Life insurance
- Long-term disability coverage
- Flexible spending accounts for healthcare and dependent care expenses
- Dental and Vision Insurance
- Parental and Maternity Leave
Application Deadline:
Job openings are posted for at least seven calendar days. The review and selection process may begin as early as the eighth day after posting. This opening may be removed from posting boards and filled anytime after the minimum posting period has ended.
U-M EEO Statement
The University of Michigan is an Equal Opportunity Employer. We are committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants, including protected veterans and individuals with disabilities.