This job is closed
Applications are no longer available for this announcement. Explore current related opportunities below.
Job description
Executive Director of Cybersecurity and Privacy
Charlotte-Mecklenburg Schools - Charlotte, North Carolina Open in Google Maps
Job Details
Job ID:
Application Deadline: Oct 26, 2026 4:59 AM (UTC)
Posted: Sep 25, :00 AM (UTC)
Starting Date: Immediately
Job Description
General Definition of Work
The executive director of cybersecurity and privacy, under minimal supervision, performs senior-level work with extensive decision-making discretion applying advanced subject matter knowledge and operational oversight of the district's cybersecurity program and data privacy operations. Position develops, implements, and monitors security policies, procedures and controls; and ensures compliance with applicable laws, regulations, and industry standards. Oversees identity and access management, incident response, cybersecurity technologies, risk assessments, audits, and data privacy reviews to protect district information assets and systems. Employee performs advanced and supervisory work to carry out the Board of Education policies and procedures under the direction of the Cybersecurity Officer.
Qualifications
To perform this job successfully, an individual must be able to perform each essential function satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Salary/Status
Pay Grade 11/Full-time, 12 months
Reports To
Cybersecurity Officer
Place of Work
The normal place of work is on the premises used by Charlotte-Mecklenburg Schools. Charlotte- Mecklenburg Schools reserves the right to require you to work at such other place(s) as it may reasonably require from time to time.
Essential Functions
Adhere to all state, federal, and local laws, policies, and procedures
Adhere to all state, federal, and local laws, policies, and procedures
Lead, manage, supervise, and evaluate assigned programs/staff in the district
Collaborate on and support cybersecurity strategic planning, policy development, incident response planning, and threat and risk analysis
Oversee identity and access management security across the district's identity platforms, including security monitoring and incident response, conditional access and privileged access controls, risk-based authentication, and account and session security
Conduct vendor data-privacy reviews and ed-tech application vetting to ensure compliance with student data privacy laws and district privacy standards
Investigate, analyze, and formulate methods for handling special projects and reports
Partner with the Cybersecurity Officer to develop and maintain district-wide cybersecurity policies, standards, and procedures aligned with Board policy and industry frameworks (e.g., NIST CSF)
Direct day-to-day execution of the district's cybersecurity incident response plans and playbooks, including investigation, containment, remediation, and reporting
Oversee the day-to-day evaluation, piloting, and implementation of cybersecurity products and technologies (e.g., SIEM/SOAR, endpoint detection and response) identified through strategic planning
Oversee required cybersecurity audits, vulnerability assessments, and compliance reviews, including security control documentation and remediation tracking
Coordinate with other departments on disaster and contingency emergency management planning
Ensure adherence to security, privacy, and intellectual property laws across the cybersecurity program
Participate in the development and administration of the department budget
Oversee creation and maintenance of standard operating procedures, best practices, and playbooks across cybersecurity and privacy functions
Facilitate/participate in professional development and related meetings
Complete local, state, or federal surveys and reports accurately and promptly, including cybersecurity compliance reporting
Create an inclusive environment with positive communication/public relations
Perform related work as assigned or required
Knowledge, Skills, Abilities
Comprehensive in-depth knowledge of cybersecurity principles, frameworks, threats, and best practices, and their application to incident response, risk management, and policy development
Comprehensive knowledge of enterprise IT infrastructure and identity and access management security controls sufficient to oversee day-to-day cybersecurity operations
Comprehensive knowledge of vendor data-privacy review and ed-tech application vetting, including compliance with student data privacy laws
Skilled in SIEM/SOAR technologies, incident response, and security audit and compliance processes
Ability to serve as a thought partner and subject matter expert to the Cybersecurity Officer on strategy, policy, and incident response planning, and to translate direction into day-to-day execution for cybersecurity office staff
Skilled in evaluating, selecting, and implementing cybersecurity and identity security technologies aligned with district goals
Ability to supervise cybersecurity office staff, manage a departmental budget, and ensure compliance with applicable laws and regulations
Strong judgment, problem-solving, and decision-making skills; ability to work independently under pressure
Effective communication and relationship-building skills, with the ability to maintain confidentiality and evaluate program effectiveness
Position Type: Full-time
Job Categories:
Administration > Director/Coordinator/Manager
Administration > Safety/Security
Administration > Technology
Support Staff > Safety/Security
Contact Information
CMS Staff
600 E. Fourth Street
Fifth Floor
Charlotte, North Carolina 28202
Phone:
Email:
Map
The content you submit, offer, contribute, attach, post, or display (each a "Submission") will be viewed by other users of the service who may or may not be accurately representing who they are or who they represent. Do not include any sensitive data in your submissions. Any submission or any use or reliance on any content or materials posted via the service or obtained by you through the use of the service is at your own risk. "Sensitive data" for purposes of this section means social security or other government-issued identification numbers, medical or health information, account security information, individual financial account information, credit/debit/gift or other payment card information, account passwords, individual credit and income information or any other sensitive personal data as defined under applicable laws.
#J-18808-Ljbffr
Worksite address
charlotte, NC, 28245, US
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.