DIRECTOR, INFORMATION SECURITY AND ASSURANCE

POSITION GOAL

The Director, Information Security and Assurance, is responsible for developing, implementing, and overseeing strategies and programs designed to mitigate information security risk across the District. Establish and lead an enterprise-wide information security and assurance function, ensuring that confidentiality, integrity, and availability of information systems and assets are identified and managed in an effective and innovative manner.   

ESSENTIAL PERFORMANCE RESPONSIBILITIES

The Director, Information Security and Assurance shall carry out the performance responsibilities listed below:

• Supervise staff as assigned in the performance of job duties.
• Oversee the development, implementation, and maintenance of the District Information Security Plan, including policies, standards, processes, and SETA (Security, Education, Training, and Awareness) initiatives aimed at mitigating information risk at all levels of the organization.
• Ensure that the information systems organization remains compliant with all state audit requirements, requests, and mandatory responses to information security incidents.
• Provide vision, leadership, and effective management of the ISA team while concurrently facilitating sustainable information security assurance operations.
• Work proactively with all information systems departments and other key District stakeholders using the District’s Business Continuity Management System (BCMS) to effectively develop, institute, and support all tactical and strategic security assurance plans.
• Work proactively with all stakeholders to implement a secure software development lifecycle, including penetration testing, code review, and architecture analysis with an emphasis on mitigating intrinsic risk.
• Implement an adaptive threat assessment system to monitor emerging information security trends, threats, and vulnerabilities.
• Protect District information systems and assets from unauthorized access, use, disclosure, disruption, modification, perusal, recording, and destruction.
• Provide timely and concise advice to senior management on crucial information security and assurance issues, current and emerging.
• Institute and manage an information risk management program, complementing other risk management initiatives within the District.
• Maintain relationships with local, state, and federal law enforcement and other related government agencies relative to District ISA initiatives and incidents.
• Monitor compliance with information security policies, standards, and processes and enforce remediation of non-compliance across the District.
• Facilitate periodic meetings with departments to promote continued awareness of ISA standards, initiatives, and training.
• Represent the District in the community and industry, programs, and conferences.
• Perform and promote all activities in compliance with the equal employment and non-discrimination policies of The School Board of Broward County, Florida.
• Participate in the training programs offered to enhance the individual skills and proficiency related to the job responsibilities.
• Review current developments, literature and technical sources of information related to job responsibilities. 
• Ensure adherence to safety rules and procedures.
• Maintain on-site presence to respond to security incidents and support activities related to information security at core network and school sites
• Follow federal and state laws, as well as School Board policies.
• Perform other duties as assigned by the immediate supervisor or designee. 

MINIMUM QUALIFICATIONS & EXPERIENCE

• An earned bachelor’s degree from an accredited
• A minimum of six (6) years, within the last ten (10) years, of progressively more responsible experience and/or training in the field related to the title of the position, including at least three (3) years of information security experience in one of the following areas: ERP Systems, Perimeter Defense, Identity Management/Directory Services.
• Computer skills as required for the posiiton.

PREFERRED QUALIFICATIONS & EXPERIENCE

• Degree major in technology with concentration in Information Security Management.
• Certified Information Systems Security Professional (CISSP) certification.
• Certified Information Security Manager (CISM).
• Certified in Risk and Information Systems Control (CRISC) certification.
• Chief Information Security Officer (CISO) certification.
• Bilingual skills. 

SIGNIFICANT CONTACTS-frequency, contact, purpose

Frequently works with district and school-based administrators at all levels; periodically works with senior managers and cadre directors, to ensure appropriate information security needs are being met and maintained.

PHYSICAL REQUIREMENTS

Light work: Exerting up to 20 pounds of force occasionally, and/or up to 10 pounds of force as frequently as needed to move objects.

TERMS OF EMPLOYMENT

Salary and benefits shall be paid consistent with the District's approved compensation plan. Length of the work year and hours of employment shall be those established by the School Board.

LINK TO JOB DESCRIPTION

To review this position's complete job description, access the following website: https://www.browardschools.com/Page/36072 and search by Job Code. The Job Code for this position is: R-084

LOCATION PREFERENCES/ADDITIONAL INFOR