Cyber Fusion Center Compliance Manager in City of Westminster

Join our team at the California State University, Office of the Chancellor, and make a difference in providing access to higher education. We are currently seeking experienced candidates for the position of Cyber Fusion Center Compliance Manager. The CSU Chancellor's Office, located on the waterfront adjacent to the Aquarium of the Pacific in downtown Long Beach, is the headquarters for the nation's largest and most diverse system of higher education.

The CSU Chancellor's Office offers a premium benefit package that includes:

• Outstanding vacation, health, and dental plans
• A fee waiver education program
• Membership in the California Public Employees Retirement System (PERS)
• 15 paid holidays a year

The anticipated salary hiring range is up to $130,008 per year, commensurate with qualifications and experience.

This position may be located at a CSU campus or the Chancellor's Office in Long Beach, CA. Flexibility to telecommute two days a week, with three days on-site at the designated reporting campus.

The California State University, Office of the Chancellor, is seeking a Cyber Fusion Center Compliance Manager to be responsible for managing CFC-related compliance activities and providing operational oversight of CFC security control implementation across the 22 CSU campuses and the Chancellor’s Office.

The role operates in a federated environment where campuses maintain responsibility for local systems, operations, risk decisions, compliance obligations, response actions, and operational outcomes. Within that environment, this role manages compliance coordination, control verification, evidence collection, remediation tracking, documentation, standards and guideline review, operational risk tracking, and reporting for CFC security controls and related CFC capabilities.

The position works directly with campus ISOs, Chancellor’s Office risk, compliance, and audit teams, vendor teams, and subject matter experts to support consistent interpretation of requirements, maintain compliance visibility, evaluate control implementation status, track operational risks, and elevate security risks, material control gaps, or issues requiring CFC leadership or governance attention.

Responsibilities

• Serve as the lead and primary point of contact for CFC-related compliance coordination with campus ISOs, Chancellor’s Office risk, compliance, and audit teams, vendor teams, and subject matter experts.
• Develop, manage, maintain, and carry out CFC-related compliance processes for security controls related to CFC capabilities, including required log ingestion, control verification, evidence collection, remediation tracking, documentation, reporting, and escalation.
• Collect, review, evaluate, and maintain information related to CFC security control implementation from campuses, vendor operations, detection and monitoring activities, incident response activities, audit findings, and other relevant sources.
• Maintain centralized compliance, operational risk, remediation, and evidence tracking tools to support leadership visibility, operational readiness, audit/compliance coordination, and follow-through on identified issues.
• Assess compliance, control, and readiness gaps; identify operational risk implications; recommend follow-up actions; and escalate security risks or material issues to CFC leadership.
• Prepare, deliver, and maintain reporting and metrics on compliance status, operational risk trends, and control implementation to support leadership review and decision-making.
• Coordinate with Chancellor’s Office risk, compliance, audit, and subject matter expert teams to support consistent interpretation and application of applicable laws, regulations, frameworks, and security requirements, including GLBA, NIST, HIPAA, and PCI DSS.
• Develop, review, update, and maintain CFC-related standards, guidelines, documentation, and operational compliance materials to support consistent implementation of CFC security control expectations, evidence requirements, control verification, remediation tracking, severity and escalation practices, reporting, and operational coordination.
• Support CFC governance activities by preparing issue summaries, documenting decisions, tracking follow-up actions, and escalating issues that affect service expectations, risk, cost, campus participation, or program priorities.
• Supervise student compliance and risk analysts by assigning work, reviewing deliverables, providing direction, and supporting completion of CFC compliance, risk, documentation, evidence, and reporting activities.
• Recommend improvements to CFC compliance, operational risk tracking, evidence collection, remediation follow-up, documentation, reporting, and operational guidance processes as CFC capabilities mature and expand.

Qualifications

• Bachelor’s degree in computer science, information security, information systems, business administration, public administration, or a related field, or an equivalent combination of education and experience.
• Five (5) or more years of experience in information security, governance, risk, compliance, auditing, or related IT roles.
• Minimum of three (3) years of direct experience in governance, risk, and compliance (GRC) functions, including experience supporting or coordinating compliance programs, risk assessments, remediation tracking, or reporting processes.
• Experience working across multiple stakeholders, including technical teams, business units, and external partners.
• Strong understanding of governance, risk, and compliance principles, including regulatory frameworks (e.g., NIST, PCI DSS, GLBA, HIPAA).
• Ability to support risk assessment processes, maintain centralized tracking tools, and prepare clear risk and compliance reporting.
• Ability to translate technical and operational findings into clear risk statements and actionable reporting.
• Strong organizational and program management skills, including the ability to track multiple workstreams and ensure follow-through.
• Ability to collaborate across campuses, vendor teams, and internal stakeholders.
• Strong written and verbal communication skills, including the ability to present to leadership and non-technical audiences.
• Ability to handle sensitive and confidential information with discretion.

Preferred Qualifications

• Experience in higher education or federated environments.
• Relevant certifications in information security or governance, risk, and compliance, such as CISM, CISA, CRISC, CISSP, or equivalent demonstrated experience.
• Experience supporting vendor-managed security services.
• Experience coordinating compliance programs, risk assessments, remediation tracking, or reporting processes.

Application Period

Priority consideration will be given to candidates who apply by August 20, 2026. Applications will be accepted until the job posting is removed.

Equal Employment Opportunity

Consistent with California law and federal civil rights laws, the CSU provides equal opportunity in education and employment without unlawful discrimination or preferential treatment based on race, sex, color, ethnicity, or national origin. Reasonable accommodations will be provided for qualified applicants with disabilities who self-disclose by contacting the Senior Human Resources Manager at (562) 951-4070.

COVID-19 Vaccination Policy

Per the CSU COVID-19 Vaccination Policy, it is strongly recommended that all Chancellor’s Office employees who are accessing office and campus facilities follow COVID-19 vaccine recommendations adopted by the U.S. Centers for Disease Control and Prevention (CDC) and the California Department of Public Health (CDPH) applicable to their age, medical condition, and other relevant indications.

Background

The Chancellor's Office policy requires that the selected candidate successfully complete a full background check (including a criminal records check) prior to assuming this position.