IT Security Program Manager
Listed on 2026-03-01
-
IT/Tech
Cybersecurity, IT Project Manager, IT Consultant, Information Security
Position Type:
Admin Professional Technical/ IT Security Program Manager
Date Posted: 2/24/2026
Location:
Education Service Center
Date Available:
04/01/2026
Closing Date: 03/17/2026
Position PurposeThe IT Security Program Manager protects the district's digital ecosystem by running a comprehensive data privacy and IT security program that safeguards applications, data, technology infrastructure and operations. This role drives the development and execution of security strategies that support the district's educational and operational goals while ensuring compliance with privacy and regulatory standards. It spearheads activities such as incident response, training & awareness, security assessment, data privacy reviews.
Acting as a strategic advisor and collaborator, the position ensures data privacy and technology security program efforts are aligned with the district's mission and emerging technology climate.
- Manage a comprehensive data privacy and technology security program that guides the definition of objectives, scope, timelines and deliverables; ensure alignment with district goals, risk tolerance and compliance requirements.
- Coordinate and execute the response and remediation to data privacy and technology security tickets, ensuring timely investigation, resolution and collaboration across teams to address incidents, risks and service‑related issues.
- Coordinate with IT and Risk Management to identify, assess and mitigate security‑related technology and data risks. Implement proactive strategies to safeguard application, data and technology infrastructure systems.
- Develop, evaluate and help enforce comprehensive policies and communication frameworks that support data privacy and confidentiality, technology security and system availability.
- Develop and maintain incident response plans. Lead response and recovery efforts during data privacy and technology security incidents. Ensure continuity planning supports ongoing learning and operations during disruptions.
- Ensure adherence to IT security and data‑related laws, frameworks and industry standards (e.g., NIST, FERPA). Coordinate and respond to internal and external audits and ensure continuous improvements based on findings. Support cyber insurance and reporting requirements.
- Develop and maintain processes to ensure student and district data privacy. Review new tools for compliance with privacy policies and publish vendor privacy practices for transparency.
- Partner with IT teams on the implementation, operation and maintenance of IT‑based security technologies (e.g., firewalls, endpoint protection, backup systems). Ensure solutions are secure, updated and meet district standards.
- Manage expectations and compliance of all third‑party vendors. Regularly evaluate partner practices, ensure contractual obligations around data protection, technology standards and maintain transparency with stakeholders.
- Serve as the primary escalation point for data privacy and technology security incident escalation and operational coordination, ensuring timely communication with leadership, regulatory bodies and stakeholders. Lead cross‑functional efforts in incident response, risk assessment and process optimization while fostering collaborative relationships across internal teams and external partners.
- Lead security awareness programs for staff, students and stakeholders. Foster a security‑first culture by educating the organization on best practices and evaluating training effectiveness.
- Lead the virtual data privacy and technology security team and other supporting personnel. Promote a collaborative and accountable team culture, ensuring expertise is leveraged across functional areas to support IT security goals.
- Research and recommend program budget needs. Monitor expenditures and report program investments to district leadership.
- Perform other duties as assigned or requested.
- Knowledge of and applicable experience with ITIL practices.
- Strong, modern and applicable experience implementing industry standard data privacy and technology security controls, best practices and frameworks (e.g., NIST).
- In‑depth knowledge of…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).