Associate Director, IT Security - Boston, United States - Year Up

Year Up

Verified Company

Boston, United States

2 days ago

Posted by:

Mark Lane

beBee recruiter

Description

OVERVIEW:
The Associate Director of IT Security will report directly to the Chief Technology Officer.

They will work cross-functionally across Transformation and Technology, and other departments within Year Up, to ensure that technology use and business processes adhere to accepted IT Security practices.

They will work as a liaison among stakeholders to adapt and mature these practices to ever-changing business requirements and act as a point person responsible for evolving the organization's Cybersecurity training.

As part of their responsibilities, the Associate Director of IT Security will be expected to interact with students as a mentor, group facilitator, speaker, or advocate, participating in Year Up's mission.

KEY RESPONSIBILITIES:

Manage internal and external Security Team members to advance Year Up's Security Program and continuously improve our security posture, leveraging the Center for Internet Security controls as a guide.
Provide written quarterly Security Program updates to the CTO and work together on executive briefings to the Board of Directors.
Manage internal and external Security Team members in their administration of security platforms and timely resolution of service desk tickets and security alerts.
Work crossfunctionally to provide all required documentation and implement requested improvements to ensure Year Up's successful completion of our yearly Cybersecurity insurance renewal.
Oversee quarterly security audits of critical systems and processes across the organization.
Participate in various projects, technology acquisition processes, and Year Up's weekly Change Control Board meetings to ensure proper cybersecurity guidelines are being followed.
Manage cybersecurity training for all staff and contingent workers, so that Year Up meets all regulatory and customer requirements.
Work with senior leadership and Legal to draft and/or update security policies on a regular basis.
Perform initial security and privacy reviews of customer contracts as needed and serve as a backup to the CTO to negotiate related concerns and or limitations.
Help drive business partner satisfaction by providing regular updates on active work, proactively identifying ways to improve services, and developing action plans needed to address improvement areas.

QUALIFICATIONS:

46 years of overall technology experience required.
2+ years of Cybersecurity management experience required.
Deep familiarity with the security requirements of some combination of Microsoft Active Directory, Microsoft 365, Windows and Linux Servers, Meraki Networks, Salesforce, AWS Cloud Hosting, Financial and Human Capital Management Systems, Application Development, Student Learning Management Systems, Data Warehouses and Enterprise Identity and Access management (IAM) systems required.
Strong understanding of widely used security control frameworks, such as CIS or NIST, required.
CISSP certification a plus.
Higher Education experience a plus.
Excellent verbal and written communication skills and the ability to work effectively in a matrix organization.
Strong analytical skills, including a thorough understanding of how to interpret customer business needs and translate them into cybersecurity requirements.
Commitment to continued professional development and growth.
Comfort with change in a fastmoving environment.
A passion for working with young adults, an unshakable belief in their potential and a strong commitment to the mission of Year Up.
Understanding of the Opportunity Divide and its drivers.
Commitment to diversity and inclusion.