Information Security Manager - Technology

Information Security Manager, Technology Services
Location: Sunnybrook Office - 13455 SE 97th Ave, Clackamas, OR 97015
Schedule: 8 hours per day/ 5 days per week/ Year-Round Calendar
Find your "why" with Clackamas ESD
At Clackamas Education Service District, our mission is to lead, serve and innovate for learning. Clackamas ESD provides services in early learning, special education, technology and teacher/staff support to Clackamas County school districts. We ensure students and families in all of our communities — big and small — have access to equitable education services. Learn more.

About the program:
Technology Services delivers critical technology services to our component school districts. Our ability to work collaboratively across the county helps us deliver enterprise-scale solutions at reduced costs. These services include Network and Data Center services, Infinite Visions finance and human resources management system, Synergy student information management system and other technology services.

About this position:
In coordination with the Chief Information Officer (CIO), the Information Security Manager position establishes and supports the technical information security posture of Clackamas ESD’s information systems. This includes proactive security measures to protect ESD and school district staff, students, and systems. The Information Security Manager assists in reactive investigations and computer forensics as directed by the Chief Information Officer. The position helps guide Information Security policy, procedure, and education at both Clackamas ESD and its partner school districts. The Information Security Manager works closely with other technology staff from around the region to improve the overall Information Security health of schools.

Essential functions:

• Provides supervision, direction, and decision-making necessary to information security services utilizing solid functional, technical and/or project management knowledge and skills.
• Proactively monitors, analyzes, reports, and addresses current information security threats and activity directed at Clackamas ESD and partner school district information systems, employees, and students.
• Internally assesses, evaluates, and makes recommendations to administration regarding the information security posture and practices of Clackamas ESD and partner district information and technology systems.
• Conducts security risk assessments, audits, penetration testing, and vulnerability management efforts to ensure compliance with federal, state, and local regulations.
• Continually reviews and analyzes existing information security tools and practices, their effectiveness and efficiency, and develops recommendations for improving or expanding existing capabilities.
• Manages and maintains security infrastructure including firewalls, endpoint security, identity and access management, and data loss prevention tools.
• Tracks emerging information security trends and maintains a current foundational knowledge of best practices to protect data, systems, and staff from threats.
• Maintains project schedules, timelines, and provides reports on project status as requested.
• Collaborates with external security agencies, industry partners, and other educational institutions to enhance cybersecurity knowledge and preparedness.
• Coordinates cybersecurity tabletop exercises to strengthen incident response readiness.
• Provides training, consultation, & advice on student and staff security initiatives to proactively defend against compromise.
• Participates as needed in incident response training and response to security events.
• Maintains a positive and client friendly relationship that focuses on customer service.
• Maintains a work schedule that ensures systems availability to meet school district and departmental demands.
• Maintains positive relationships with other school districts, ESDs, and state agencies.
• Maintains a knowledge base to ensure that service delivery meets state, federal, and local laws.
• Participates and provides leadership in district and regional forums and user groups.
• Participates in and provides leadership in departmental meetings.

Minimum qualifications:

• Minimum four years’ recent work experience in information security, information systems, or other related field directly supporting enterprise technology usage.
• Desire to supervise, lead, and develop staff.
• Demonstrated ability to manage remote teams and provide a positive influence in delivering excellent customer service.
• Demonstrated ability to work independently to solve problems and to effectively schedule work in the face of changing priorities and emergency situations.
• SSCP or CISSP certificate or achievement of certification within 18 months of hire.
• Demonstrated working experience with information security tools, practices, and techniques including application protection, IDS, IPS, SEIM, and logging systems.
• Demonstrated experience in TCP/IP based computer networking fundamentals including routing, switching, DNS, & DHCP.
• Demonstrated experience in enterprise information systems fundamentals including Windows and Linux servers and SAN storage.
• Demonstrated experience working with Palo Alto firewalls.
• Working knowledge of public & private cloud operation fundamentals
• Working knowledge of scripting utilities and syntax.
• Working knowledge of public K12 education and education focused regulatory and industry standards, such as OSIPA, FERPA, COPPA, & CIPA.
• Demonstrated ability to manage multiple initiatives simultaneously, utilizing appropriate processes and delivering positive results.
• Excellent written, verbal, and communication skills.
• Strong customer service orientation and leadership skills.
• Physical and mental attributes sufficient to perform essential functions.

Preferred qualifications:

• Bachelor’s Degree in Cybersecurity, Information Systems, or equivalent.
• SSCP or CISSP certificate
• Experience working with Cisco network and security devices.
• Experience working with Palo Alto firewalls in a multi-tenant environment.
• Experience conducting penetration testing
• Experience working with information security forensic practices and investigation techniques.
• Experience in modern computer programming language(s) including PHP, C#, Java, C , or C.

Salary: Range 11 of the meet and confer salary schedule: $124,606 - $136,159 depending on experience.

• Full medical, dental, and vision insurance with generous district-paid contribution (most employees pay $0 out of pocket to maintain health insurance coverage)
• Retirement through the Oregon Public Retirement System (PERS) includes pension and individual account program
• Paid time off, including paid holidays, sick leave, and other personal leave
• Opportunities to grow with us with generous professional development expense reimbursements
• Clackamas ESD covers the full cost of fingerprinting for new employees, saving you $82.50 - a benefit not offered by most other districts
• Read more about our benefits here

• Cover Letter
• Resume
• Completed application form