Executive Director of Cybersecurity and Privacy

Job description

General Definition of Work

The executive director of cybersecurity and privacy, under minimal supervision, performs senior-level work with extensive decision-making discretion applying advanced subject matter knowledge and operational oversight of the district's cybersecurity program and data privacy operations. Position develops, implements, and monitors security policies, procedures and controls; and ensures compliance with applicable laws, regulations, and industry standards. Oversees identity and access management, incident response, cybersecurity technologies, risk assessments, audits, and data privacy reviews to protect district information assets and systems. Employee performs advanced and supervisory work to carry out the Board of Education policies and procedures under the direction of the Cybersecurity Officer.

Qualifications

To perform this job successfully, an individual must be able to perform each essential function satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Salary/Status

Pay Grade 11/Full-time, 12 months

Reports To

Cybersecurity Officer

Place of Work

The normal place of work is on the premises used by Charlotte-Mecklenburg Schools. Charlotte- Mecklenburg Schools reserves the right to require you to work at such other place(s) as it may reasonably require from time to time.

Essential Functions

Adhere to all state, federal, and local laws, policies, and procedures

Adhere to all state, federal, and local laws, policies, and procedures

Lead, manage, supervise, and evaluate assigned programs/staff in the district

Collaborate on and support cybersecurity strategic planning, policy development, incident response planning, and threat and risk analysis

Oversee identity and access management security across the district's identity platforms, including security monitoring and incident response, conditional access and privileged access controls, risk-based authentication, and account and session security

Conduct vendor data-privacy reviews and ed-tech application vetting to ensure compliance with student data privacy laws and district privacy standards

Investigate, analyze, and formulate methods for handling special projects and reports

Partner with the Cybersecurity Officer to develop and maintain district-wide cybersecurity policies, standards, and procedures aligned with Board policy and industry frameworks (e.g., NIST CSF)

Direct day-to-day execution of the district's cybersecurity incident response plans and playbooks, including investigation, containment, remediation, and reporting

Oversee the day-to-day evaluation, piloting, and implementation of cybersecurity products and technologies (e.g., SIEM/SOAR, endpoint detection and response) identified through strategic planning

Oversee required cybersecurity audits, vulnerability assessments, and compliance reviews, including security control documentation and remediation tracking

Coordinate with other departments on disaster and contingency emergency management planning

Ensure adherence to security, privacy, and intellectual property laws across the cybersecurity program

Participate in the development and administration of the department budget

Oversee creation and maintenance of standard operating procedures, best practices, and playbooks across cybersecurity and privacy functions

Facilitate/participate in professional development and related meetings

Complete local, state, or federal surveys and reports accurately and promptly, including cybersecurity compliance reporting

Create an inclusive environment with positive communication/public relations

Perform related work as assigned or required

Knowledge, Skills, Abilities

Comprehensive in-depth knowledge of cybersecurity principles, frameworks, threats, and best practices, and their application to incident response, risk management, and policy development

Comprehensive knowledge of enterprise IT infrastructure and identity and access management security controls sufficient to oversee day-to-day cybersecurity operations

Comprehensive knowledge of vendor data-privacy review and ed-tech application vetting, including compliance with student data privacy laws

Skilled in SIEM/SOAR technologies, incident response, and security audit and compliance processes

Ability to serve as a thought partner and subject matter expert to the Cybersecurity Officer on strategy, policy, and incident response planning, and to translate direction into day-to-day execution for cybersecurity office staff

Skilled in evaluating, selecting, and implementing cybersecurity and identity security technologies aligned with district goals

Ability to supervise cybersecurity office staff, manage a departmental budget, and ensure compliance with applicable laws and regulations

Strong judgment, problem-solving, and decision-making skills; ability to work independently under pressure

Effective communication and relationship-building skills, with the ability to maintain confidentiality and evaluate program effectiveness

#J-18808-Ljbffr

Worksite address

charlotte, NC, 28245, US

Who can apply

Review the original listing for work authorization, qualifications and employer requirements.