What are the responsibilities and job description for the Cybersecurity Manager - Instructional Support Facility position at Cherry Creek School District?
Job Title : Cybersecurity Manager
FLSA Exemption Status : Exempt
Classification Group : Professional Technical
Supervising Position : D irector of Information Technology or designee
Pay Plan : Professional Technical
Pay Range : Range 11
Last Updated : 09/18/2024
Pay Information
Benefits Information
JOB SUMMARY : Manage and maintain a comprehensive cybersecurity program within the Cherry Creek School District. Act as the primary point of escalation for cybersecurity operations, incident response, vulnerability assessments, and ensuring compliance with national frameworks and cyber insurance requirements. Collaborate with Information Technology (IT) staff, educators, and administrators to create a secure computing environment that protects the District’s technology infrastructure, data, staff, students, and families.
ESSENTIAL DUTIES AND RESPONSIBILITIES : The subsequent duties outline the fundamental operations of the position and exemplify the nature of the tasks carried out. They do not encompass a comprehensive inventory of the obligations and responsibilities fulfilled in this role. The approximation of frequencies and time allocation percentages are flexible and subject to the requirements of the organization. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
1.
Cybersecurity Team/Program Management – Manage daily operations of the cybersecurity team including risk analysis, incident response, cybersecurity training and processes. Ensure protection of district data, systems, and applications aligned with established frameworks, best practices and needs of the business
2.
Security Infrastructure Management – Work collaboratively in the management of security technologies, including firewalls, endpoint protection, vulnerability assessments, disaster recovery and business continuity. Manage updates and security patches implementation.
3.
Incident response and management - Develop and maintain incident response plan, address, and mitigate cybersecurity incidents. Lead response coordination, mitigation efforts and documentation
4.
Compliance and Reporting – Ensure compliance with relevant frameworks, regulations, standards, cyber insurance, and district standards. Collaborate with internal and external stakeholders.
5.
Software/Hardware Life-Cycle Management – Oversee and/or collaborate with stakeholders in the review of software and/or hardware in use within the district. Ensure assets meet established district and departmental guidelines and cybersecurity requirements.
6.
Security Awareness and training – Promote cybersecurity awareness training programs for staff, students and stakeholders. Monitor and evaluate effectiveness of training.
7.
Vendor Management – Evaluate and monitor cybersecurity practices of third-party vendors providing services to the district. Maintain security requirements for contractors and vendors.
8.
Collaborate with Physical Security, Dispatch Operations and Life Safety partners in software device life-cycle management.
9.
Perform other duties as assigned or requested.
REPORTING RELATIONSHIPS : This job has supervisor responsibilities including, but not limited to, interviewing, hiring, directing work, assigning work, supervising work, training, evaluating, disciplining, and terminating. Direct reports:
- Cybersecurity Engineer
- Senior Cybersecurity Engineer
MINIMUM QUALIFICATIONS : The minimum prerequisites of formal education, professional work experience, certifications, licenses, endorsements, designations, trainings, and other criteria that a candidate must fulfill to be considered for a position. It is essential that certifications, licenses, endorsements, designations, and trainings are fulfilled, valid, and not expired.
- Criminal background check and fingerprinting required
- Bachelor's degree
- Five (5) years of professional work experience
- Experience leading a cybersecurity, systems administration, or network team
- In-depth knowledge of regulatory compliance such as FERPA, COPPA, CIPA and other relevant state and federal statutes regarding cybersecurity, safety, and data privacy
- In depth knowledge of Cybersecurity Frameworks (NIST), Cyber insurance requirements and their application in a K-12 setting
- Strategic knowledge of enterprise cybersecurity technologies involving cybersecurity including SIEMs, forensic tools, firewalls, and monitoring systems
- In depth knowledge of authentication technology such as SSO, SAML, Windows, Google and LDAP systems
- Experience with hardware and software lifecycle programs, standards, and processes
- Experience with performing cybersecurity analysis and risk assessments of technology infrastructures
- Excellent interpersonal, problem solving, critical observation, conflict resolution and communications skills
PHYSICAL REQUIREMENTS AND WORKING CONDITIONS : The physical demands, mental functions, cognitive capacities, and work environment factors required to perform a position’s essential functions. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
- Sedentary work strength level (lifting or carrying up to ten pounds)
- Primarily works indoors
- Typically a quiet noise level
- Work location is subject to change to meet the requirements of the organization
DESIRED QUALIFICATIONS : Formal education, professional work experience, certifications, licenses, endorsements, designations, trainings, and other qualifications relevant to the position that are strongly preferred but not mandatory for a candidate to be considered.
- Experience working in the public sector
- Experience working directly with people from diverse racial, ethnic, and socioeconomic backgrounds
- Racially conscious and culturally competent with the skill, will, capacity, and knowledge to commit to a culture of continuous improvement
- CISSP certification
- ITIL certification
- Experience working in a K-12 school district or higher educational setting
