Title: Cyber Security Manager

Employee Classification: Administrative/Professional (Exempt)

Institution: Northeast State Community College

Department: OIT

Salary: $63,815-$73,997, dependent on education and experience

Please use the Total Compensation Calculator found on the Northeast State Careers Page for a breakdown of the value of the benefits offered to employees of the college

Job Summary

Reporting to the Director of Infrastructure and Network Services, the Cyber Security Manager collaborates with departments across the organization to promote cybersecurity awareness, deliver training, and ensure the secure handling of data, including its collection, transfer, storage, and use across social media, mobile devices, and applications. The analyst plays a key role in reducing risks to institutional information by identifying, mitigating, and responding to threats such as cyberattacks and insider risks. Additionally, the position supports and oversees the implementation of IT security services, policies, and programs that strengthen the organization’s overall security posture.

Job Duties

 • Manage the organization’s information security program, including cybersecurity awareness initiatives, training, and outreach focused on policy, compliance, and best practices.

• Collaborate with other departments, including Internal Audit and Business and Finance, to identify IT risks and implement appropriate IT risk management strategies; recommend policy and guideline changes.

• Stay current on emerging information security trends, technologies, and threats.

• Monitor organizational networks for potential security breaches and lead investigations when incidents occur.

• Provide leadership and guidance to IT security, identity management, and compliance staff; attend meetings as departmental representative; utilize project planning to ensure appropriate resource allocation; participate in daily operational tasks of the unit as needed.

• Lead and oversee the security incident response process and IT related compliance activities; recommend and implement corrective actions for violations of IT policies.

• Develop, recommend, and support the implementation of security standards, procedures, and best practices across the organization.

• Advise Information Technology staff on effective security strategies and risk reduction measures.

• Recommend security enhancements to IT Management.

• Assist technicians and end users with the installation, configuration, and understanding of new security tools, technologies, and procedures.

• Ensure periodic or event driven IT security audits are conducted, including risk assessments, mitigation planning, GLBA compliance, and other state and federal regulatory requirements.

• Maintain up to date knowledge of IT risks by reviewing security advisories, professional publications, and industry resources; proactively identify threats and recommend protective measures.

• Serve as the contact point for external auditors and agencies, survey requests, information requests, etc., related to matters of data security or privacy.

• Convene and lead ad hoc security teams as needed in response to emerging risks or threats.

• Complete other assignments as directed by supervision. 

Minimum Qualifications

• Associate’s degree in Cyber Security or related field from an accredited institution
• (2) Years of field-related experience
• Certification in (1) of the following: Certified Information Systems Security Professional (CISSP), Security +, or EC-Council Certified Ethical Hacker (CEH)

Preferred Qualifications

• Bachelor’s degree in Cyber Security or related field from an accredited institution
• Certification in the following areas: ISACA Certified Information Systems Auditor (CISA), Certified Information Systems Security Manager (CISSM), Certified Information Systems Security Analyst (CISSPA), and Certification in Project Management.
• Conversational ability or fluency in a language other than English

Knowledge, Skills, and Abilities

• Technology Skills: MS Office suite; videoconferencing software; digital records management systems; general operating systems and data information systems
• Excellent communication skills and the ability to work well with people at all levels and across departments are essential.
• Knowledge of current network technology and equipment, including local and wide area networking, the Internet, and the World Wide Web.
• Excellent interpersonal, verbal, and written communication skills.
• Excellent time management, organizational, analytical, and problem-solving skills.

For assistance regarding the job ad, application process, or application status, please contact the Office of Human Resources at 423-354-5183 or HRstaffing@northeaststate.edu.

Special Instructions to Applicants: To be considered for a position at Northeast State, you must create an online application. A resume and unofficial transcripts are required; a cover letter is optional. You will also be required to provide the contact information for a minimum of three (3) professional references. If you are selected for an interview your references WILL be automatically contacted. Your skills, abilities, qualifications, and years of experience will be evaluated using only what is recorded on your application. Please note that attaching a resume does not substitute for completion of the application form. Part-time work experience is calculated at 50% of full-time experience.