Director, Information Technology Operations and Cybersecurity - PROMOTIONAL ONLY

Plan, direct and manage the District’s cybersecurity and data privacy programs and operations in support of the District’s Strategic Plan, LCAP goals, and the Educational Technology Plan; lead and coordinate information security functions across the District to ensure consistent and high-quality information security management in support of business goals; serve as the District’s senior cybersecurity officer and primary point of accountability for the protection of confidential student and employee data.

Design the District’s cybersecurity controls systems in accordance with applicable frameworks such as the National Institute of Standards and Technology (NIST) Cybersecurity Framework, Center for Internet Security (CIS) Critical Security Controls and Internal Standardization Organization (ISO) to assure the confidentiality, integrity, and availability of confidential data stored and retrieved online, including student data, employee data, health information, and financial information.

Conduct cybersecurity reviews of new and existing information systems and develop continuous improvement plans; direct vulnerability management, penetration testing, security awareness training, phishing simulations, and tabletop exercises for staff and District leadership; maintain a current risk register and present cybersecurity risk assessment to the Superintendent’s Cabinet; develop and maintain disaster recovery plans for district systems.

Lead the cybersecurity incident response program, including detection, containment, eradication, recovery, post-incident review, and required notifications to law enforcement, the California Department of Education, the California Cybersecurity Integration Center (Cal-CSIC), the Cybersecurity and Infrastructure Security Agency (CSIA), and affected individuals, as required by law.

Coordinate with Risk Management to manage cyber insurance relationships, complete underwriting questionnaires, and ensure the district meets coverage requirements and required attestations; collaborate with others, including staff, vendors, and legal representatives, to ensure that information security and privacy requirements are included in contracts and that third-party data sharing is compliant with applicable State and federal laws and regulations and Board Policies.

Oversee, maintain, identify and access management activities, including multi-factor authentication, privileged access management, single sign-on, conditional access, and the principle of least privilege across student and staff systems; develop and enforce standards, guidelines and policies relating to communications and networking systems and connected computing environments; manage information security awareness for employees, contractors, and other approved system users.

Support the Chief Technology Officer in developing and meeting the District’s vision to align infrastructure and enterprise systems with instructional initiatives; partner with Educational Technology and school sites to assess instructional and operational needs and develop and implement resulting support strategies; manage the District’s one-to-one student device program, staff device standards, mobile device management, endpoint protection, and asset lifecycle.

Direct and manage the customer service of the Integrated Technology Department; oversee and support the IT Service Desk and technology support teams to ensure the delivery of responsive and equitable service to students, families, teachers and staff in alignment with the District’s digital equity goals and its educational vision; continuously enhance and update the team’s professional skills to meet advances in technology.

Provide oversight to the development of specifications and the negotiation, administration, and evaluation of contracts for equipment and services; evaluate products and services; negotiate and approve security and privacy provisions of contracts, Data Privacy Agreements and Memoranda of Understanding with educational technology vendors, in collaboration with the Purchasing Department and legal counsel.

Provide technical expertise, information, and assistance to department leadership regarding assigned functions; participate in the development and implementation of policies, procedures and programs relating to technology operations.  Communicate with other administrators, employees, legal counsel, contractors, auditors, and outside organizations to coordinate activities and programs, resolve issues and conflicts, and exchange information.

Maintain the District’s public-facing list of approved instructional applications; maintain records relating to compliance with Student Online Personal Information Protection Act (SOPIPA) and student data privacy in accordance with Assembly Bill 1584 regarding educational technology vendors; coordinate responses to California Public Records Act requests for electronic data in coordination with senior leadership and legal counsel.

Establish and maintain high standards for Integrated Technology performance and customer service and support; establish, publish, and report on serve level agreements, key performance indicators, and customer satisfaction metrics; ensure District compliance with applicable laws, codes, rules, and regulations.

Direct the work of staff and contractors, including the work of project teams engaged in designing, configuring, implementing, and monitoring the District’s cybersecurity controls systems.

Make presentations to the Board of Education, District leadership, employees, and special committees regarding program objectives, identified risks, proposed solutions, and project activities.

Prepare and maintain a variety of reports, records and files related to assigned activities and personnel.

Attend a variety of meetings, workshops, conferences and training to maintain current knowledge of emerging cybersecurity trends.

Perform duties as it relates to the position.

A Bachelor’s degree from an accredited college or university in Computer Science, Information Systems, Cybersecurity, Engineering, Business Administration, Educational Technology, or a closely related field.  A master’s degree is preferred.

Four years of supervisory or management-level experience leading information technology operations, which includes demonstrated understanding of cybersecurity and data privacy practices, in a public agency, K-12 education, higher education, healthcare, or similar highly regulated field.

At least one current industry-recognized cybersecurity certification is strongly preferred, such as Security+, GSEC, CISSP, CISM, CISA, GIAC (GSLC GCIA, GCIH). or Certified Education Technology Leader (CETL).

Possession of a valid California driver's license and availability of a private vehicle is required.  Must be, and remain, insurable under the District’s vehicle driver’s insurance policy at the standard rate.