REQUIRED: Seven years of progressive information security experience with demonstrated expertise in security architecture, risk and compliance management, security operations, incident response, working knowledge of security frameworks (e.g. NIST 800-171 / 53 moderate, CMMC or equivalent), experience with network security, identity and access management, vulnerability management, and security monitoring tools.
PREFERRED: Professional certification (CISSP or equivalent), hands-on experience with securing HPC, GPU cluster, or data center environments, experience with AI/ML workload security, and familiarity with multi-institution or consortium security environments.

The Information Security Manager must comply with all relevant MGHPCC security policies.

3/31/2026