Cyber Fusion Center Compliance Manager

Join our team at the California State University, Office of the Chancellor, and make a difference in providing access to higher education. We are currently seeking experienced candidates for the position of Cyber Fusion Center Compliance Manager. The CSU Chancellor's Office, located on the waterfront adjacent to the Aquarium of the Pacific in downtown Long Beach, is the headquarters for the nation's largest and most diverse system of higher education. The CSU Chancellor's Office offers a premium benefit package that includes outstanding vacation, health, and dental plans; a fee waiver education program; membership in the California Public Employees Retirement System (PERS); and 15 paid holidays a year.

The anticipated salary hiring range is up to $130,008 per year, commensurate with qualifications and experience.

Administrator II

The California State University, Office of the Chancellor, is seeking a Cyber Fusion Center Compliance Manager to be responsible for managing CFC-related compliance activities and providing operational oversight of CFC security control implementation across the 22 CSU campuses and the Chancellor’s Office.

The role operates in a federated environment where campuses maintain responsibility for local systems, operations, risk decisions, compliance obligations, response actions, and operational outcomes. Within that environment, this role manages compliance coordination, control verification, evidence collection, remediation tracking, documentation, standards and guideline review, operational risk tracking, and reporting for CFC security controls and related CFC capabilities.

The position works directly with campus ISOs, Chancellor’s Office risk, compliance, and audit teams, vendor teams, and subject matter experts to support consistent interpretation of requirements, maintain compliance visibility, evaluate control implementation status, track operational risks, and escalate security risks, material control gaps, or issues requiring CFC leadership or governance attention.

Under the general direction of the Cyber Fusion Center Director, the Cyber Fusion Center Compliance Manager will:

-Serve as the lead and primary point of contact for CFC-related compliance coordination with campus ISOs, Chancellor’s Office risk, compliance, and audit teams, vendor teams, and subject matter experts.

-Develop, manage, maintain, and carry out CFC-related compliance processes for security controls related to CFC capabilities, including required log ingestion, control verification, evidence collection, remediation tracking, documentation, reporting, and escalation.

-Collect, review, evaluate, and maintain information related to CFC security control implementation from campuses, vendor operations, detection and monitoring activities, incident response activities, audit findings, and other relevant sources.

-Maintain centralized compliance, operational risk, remediation, and evidence tracking tools to support leadership visibility, operational readiness, audit/compliance coordination, and follow-through on identified issues.

-Assess compliance, control, and readiness gaps; identify operational risk implications; recommend follow-up actions; and escalate security risks or material issues to CFC leadership.

-Prepare, deliver, and maintain reporting and metrics on compliance status, operational risk trends, and control implementation to support leadership review and decision-making.

-Coordinate with Chancellor’s Office risk, compliance, audit, and subject matter expert teams to support consistent interpretation and application of applicable laws, regulations, frameworks, and security requirements, including GLBA, NIST, HIPAA, and PCI DSS.

-Develop, review, update, and maintain CFC-related standards, guidelines, documentation, and operational compliance materials to support consistent implementation of CFC security control expectations, evidence requirements, control verification, remediation tracking, severity and escalation practices, reporting, and operational coordination.

-Support CFC governance activities by preparing issue summaries, documenting decisions, tracking follow-up actions, and escalating issues that affect service expectations, risk, cost, campus participation, or program priorities.

-Supervise student compliance and risk analysts by assigning work, reviewing deliverables, providing direction, and supporting completion of CFC compliance, risk, documentation, evidence, and reporting activities.

-Recommend improvements to CFC compliance, operational risk tracking, evidence collection, remediation follow-up, documentation, reporting, and operational guidance processes as CFC capabilities mature and expand.

This position requires:

-Bachelor’s degree in computer science, information security, information systems, business administration, public administration, or a related field, or an equivalent combination of education and experience.

-Five (5) or more years of experience in information security, governance, risk, compliance, auditing, or related IT roles.

-Minimum of three (3) years of direct experience in governance, risk, and compliance (GRC) functions, including experience supporting or coordinating compliance programs, risk assessments, remediation tracking, or reporting processes.

-Experience working across multiple stakeholders, including technical teams, business units, and external partners.

-Strong understanding of governance, risk, and compliance principles, including regulatory frameworks (e.g., NIST, PCI DSS, GLBA, HIPAA).

-Ability to support risk assessment processes, maintain centralized tracking tools, and prepare clear risk and compliance reporting.

-Ability to translate technical and operational findings into clear risk statements and actionable reporting.

-Strong organizational and program management skills, including the ability to track multiple workstreams and ensure follow-through.

-Ability to collaborate across campuses, vendor teams, and internal stakeholders.

-Strong written and verbal communication skills, including the ability to present to leadership and non-technical audiences.

-Ability to handle sensitive and confidential information with discretion.

-Experience in higher education or federated environments.

-Relevant certifications in information security or governance, risk, and compliance, such as CISM, CISA, CRISC, CISSP, or equivalent demonstrated experience.      

-Experience supporting vendor-managed security services.

-Experience coordinating compliance programs, risk assessments, remediation tracking, or reporting processes.

Priority consideration will be given to candidates who apply by August 20, 2026. Applications will be accepted until the job posting is removed.

Please click "Apply Now" to complete the California State University, Chancellor's Office online employment application.

Consistent with California law and federal civil rights laws, the CSU provides equal opportunity in education and employment without unlawful discrimination or preferential treatment based on race, sex, color, ethnicity, or national origin. Reasonable accommodations will be provided for qualified applicants with disabilities who self-disclose by contacting the Senior Human Resources Manager at (562) 951-4070.

Please view the Notice of Non-Discrimination on the Basis of Gender or Sex and Contact Information for Title IX Coordinator at: https://www2.calstate.edu/titleix

This position requires new hire employment verification to be processed through the E-Verify program administered by the Department of Homeland Security, U.S. Citizenship and Immigration Services (DHSUSCIS)' in partnership with the Social Security Administration (SSA).

If hired, you will be required to furnish proof that you are legally authorized to work in the United States. The CSU Chancellor’s Office is not a sponsoring agency for staff and Management positions (i.e., H1-B VISAS).

Per the CSU COVID-19 Vaccination Policy, it is strongly recommended that all Chancellor’s Office employees who are accessing office and campus facilities follow COVID-19 vaccine recommendations adopted by the U.S. Centers for Disease Control and Prevention (CDC) and the California Department of Public Health (CDPH) applicable to their age, medical condition, and other relevant indications.

The person holding this position is considered a 'mandated reporter' under the California Child Abuse and Neglect Reporting Act and is required to comply with the requirements set forth in CSU Executive Order 1083 as a condition of employment.

The duties of this position will include participation in decisions that may have a material financial benefit to the incumbent. Therefore, the selected candidate will be required to file Conflict of Interest Form 700: Statement of Economic Interest when they first occupy the position, and on an annual basis, complete ethics training within 6 months of appointment, and attend this training every other year thereafter.

California State University, Office of the Chancellor, as part of the CSU system, is a State of California Employer. As such, the University requires all employees upon date of hire to reside in the State of California. As of January 1, 2022, the CSU Out-of-State Employment Policy prohibits the hiring of employees to perform CSU-related work outside the state of California.

The Chancellor's Office policy requires that the selected candidate successfully complete a full background check (including a criminal records check) prior to assuming this position.

Back to search results Apply now Refer a friend