Cybersecurity Director
About the Employer
Overview
Job Title: Executive Director of Cybersecurity and Privacy - Job Description: The Executive Director of Cybersecurity and Privacy, under minimal supervision, performs senior-level work with extensive decision-making discretion, applying advanced subject matter knowledge and operational oversight of the district’s cybersecurity program and data privacy operations. - Responsibilities: - * Develops, implements, and monitors security policies, procedures, and controls; and ensures compliance with applicable laws, regulations, and industry standards. - * Oversees identity and access management, incident response, cybersecurity technologies, risk assessments, audits, and data privacy reviews to protect district information assets and systems. - * Performs advanced and supervisory work to carry out the board of education policies and procedures under the direction of the Cybersecurity Officer. - Qualifications: - To perform this job successfully, an individual must be able to perform each essential function satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. - * Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. - Salary/Status: - Pay Grade 11/Full-time, 12 months - Reports To: - Cybersecurity Officer - Place of Work: - The normal place of work is on the premises used by Charlotte-Mecklenburg Schools. Charlotte-Mecklenburg Schools reserves the right to require you to work at such other place(s) as it may reasonably require from time to time. - Essential Functions: - * Adhere to all state, federal, and local laws, policies, and procedures - * Lead, manage, supervise, and evaluate assigned programs/staff in the district - * Collaborate on and support cybersecurity strategic planning, policy development, incident response planning, and threat and risk analysis - * Oversees identity and access management security across the district’s identity platforms, including security monitoring and incident response, conditional access and privileged access controls, risk-based authentication, and account and session security - * Conduct vendor data-privacy reviews and ed-tech application vetting to ensure compliance with student data privacy laws and district privacy standards - * Investigate, analyze, and formulate methods for handling special projects and reports - * Partner with the Cybersecurity Officer to develop and maintain district-wide cybersecurity policies, standards, and procedures aligned with board policy and industry frameworks (e.g., NIST CSF) - * Direct day-to-day execution of the district’s cybersecurity incident response plans and playbooks, including investigation, containment, remediation, and reporting - * Oversees the day-to-day evaluation, piloting, and implementation of cybersecurity products and technologies (e.g., SIEM/SOAR, endpoint detection and response) identified through strategic planning - * Oversees required cybersecurity audits, vulnerability assessments, and compliance reviews, including security control documentation and remediation tracking - * Coordinate with other departments on disaster and contingency emergency management planning - * Ensure adherence to security, privacy, and intellectual property laws across the cybersecurity program - * Participate in the development and administration of the department budget - * Oversees creation and maintenance of standard operating procedures, best practices, and playbooks across cybersecurity and privacy functions - * Facilitate/participate in professional development and related meetings - * Complete local, state, or federal surveys and reports accurately and promptly, including cybersecurity compliance reporting - * Create an inclusive environment with positive communication/public relations - * Perform related work as assigned or required - Knowledge, Skills, Abilities: - * Comprehensive in-depth knowledge of cybersecurity principles, frameworks, threats, and best practices, and their application to incident response, risk management, and policy development - * Comprehensive knowledge of enterprise IT infrastructure and identity and access management security controls sufficient to oversee day-to-day cybersecurity operations - * Comprehensive knowledge of vendor data-privacy review and ed-tech application vetting, including compliance with student data privacy laws - * Skilled in SIEM/SOAR technologies, incident response, and security audit and compliance processes - * Ability to serve as a thought partner and subject matter expert to the Cybersecurity Officer on strategy, policy, and incident response planning, and to translate direction into day-to-day execution for cybersecurity office staff - * Skilled in evaluating, selecting, and implementing cybersecurity and identity security technologies aligned with district goals - * Ability to supervise cybersecurity office staff, manage a departmental budget, and ensure compliance with applicable laws and regulations - * Strong judgment, problem-solving, and decision-making skills; ability to work independently under pressure - * Effective communication and relationship-building skills, with the ability to maintain confidentiality and evaluate program effectiveness