Information Security Sr Director

Job Description

The Sr. Director, Information Security is responsible for leading the information security team within the IT organization and is responsible for all aspects of information security not only across IT but all of Stride, including strategy, architecture, security policies and standards, security initiatives (roadmaps), the support for internal and external audits and compliance efforts. This individual, reporting to the VP, Chief of Information Security, advises senior management in the development, implementation, and maintenance of a company-wide information security architecture and operations, and ensures appropriate control objectives for system integrity, availability and reliability, confidentiality, accountability, and assurance within the context of the company's risk tolerance posture. This role is responsible for alignment and conformance with enterprise policy standards, which include monitoring metrics, response integration and escalation, and various risk analyses.

Essential Functions:   Reasonable accommodations may be made to enable individuals with disabilities to perform the essential duties.

• Oversee corporate IT compliance with internal and U.S. and International Government requirements;

• Oversee and support all internal and external audits and ensure compliance;

• Lead network, cloud, and endpoint security teams in safeguarding corporate networking and systems operations through cybersecurity best practices supported by a solid reference architecture and appropriate monitoring and log analysis via a Security Operations Center (SOC);

• Be responsible for the management of and the adherence to service level agreements (SLAs) of third-party cybersecurity Managed Service Providers (MSPs);

• Recommend, draft and approve security policies, standards, and processes; facilitate operations to validate compliance with those policies, standards and processes – Adherence to NIST-CSF required;

• Develop strategies and plans to ensure the timely and accurate restoration of company information systems in the event of cyber-related disruptions;

• Oversee alleged information security violations and conduct investigations in support of Corporate or legal teams as needed;

• Assist in the evaluation of emerging technologies and their potential cybersecurity impact, positive or negative;

• Understand existing K-through-12 cybersecurity software portfolio to support an effective security framework and design;

• Enhance the company’s information security risk management program;

• Partner with IT project teams to update security guidance and review new projects for security risks;

• Enhance the company’s information security education and awareness programs designed to reduce the risks to the enterprise;

• Develop, deploy and manage an information security framework utilizing industry best practices and technologies both cloud and hybrid-cloud environments;

• Assess vendors as needed including review contracts, SLAs and other documents to verify the company is obtaining best value and that vendors are meeting our information security needs and requirements;

• Execute budget evaluations, designs and execution in a manner which fosters best-value, considers broad-scope opportunities, and drives a positive return on investment (ROI).

Supervisory Responsibilities: Directly supervises 4 - 8 Full-time Equivalent (FTE) regular employees and/or contractors.  Carries out supervisory responsibilities in accordance with the organization's policies and applicable laws. Responsibilities include interviewing, hiring, and training employees; planning, assigning, and directing work; appraising performance; rewarding and disciplining employees; addressing complaints and resolving problems.

Minimum Required Qualifications:   

• Bachelor’s degree in Computer Science, Information Systems or related field

• Five years (5) cybersecurity experience in cloud-based platforms in Amazon Web Services (AWS) and Microsoft Azure

• Ten (10) years of experience in Security, Compliance and Risk Management

• Microsoft Office (M365, Word, Excel, PowerPoint, Project, Visio, Teams, etc.)

• Web proficiency – Search, web meetings

• Ability to travel 20% of the time

• Pass required background check

Desired Qualifications:  

• Master’s Degree in Computer Science, Information Systems or related field

• Certificates and Licenses:

  • Certified Information Systems Security Professional (CISSP).

  • Certified Information Security Manager (CISM).

  • Certified Information Systems Auditor (CISA)

  • Other – networ