What are the responsibilities and job description for the Manager, Information Security position at Project Open Hand?
POSITION SUMMARY:
The Manager, Information Security is responsible for managing and protecting the organization’s technology infrastructure, systems, and sensitive data while ensuring reliable day-to-day IT operations. This role plays a critical part in safeguarding client, health, and organizational information in a mission-driven environment.
Working closely with the Director of Information Technology, the Manager, Information Security will monitor infrastructure for threats, maintain system integrity, and implement cybersecurity best practices. Manage servers, networks, end point devices, and security tools. The role supports a secure, resilient technology environment that enables staff to effectively deliver services.
QUALIFICATIONS REQUIRED:
- 3–5 years of experience in Information Security, IT Infrastructure, or Network Administration.
- Strong knowledge of Windows Server environments and Microsoft 365 administration.
- Experience managing endpoint protection platforms and patch management tools.
- Familiarity with network security concepts including firewalls, VPNs, and network segmentation.
- Experience with backup and disaster recovery solutions.
- Familiarity with security frameworks and standards (i.e. HITRUST, NIST, SOC2)
- Understanding of cybersecurity risk management and threat mitigation strategies.
- Strong troubleshooting, analytical, and problem-solving skills.
- Ability to communicate technical information clearly to non-technical staff.
QUALIFICATIONS DESIRED:
- Experience working in nonprofit, healthcare, or public health environments.
- Familiarity with HIPAA security principles or healthcare data protection standards.
- Experience with cloud infrastructure (Azure or similar).
- Knowledge of identity management and multi-factor authentication systems.
- Experience with endpoint management platforms (Intune, etc.).
ESSENTIAL FUNCTIONS AND RESPONSIBILITIES:
- Monitor systems, networks, and endpoints for security threats, vulnerabilities, and suspicious activity.
- Manage and maintain cybersecurity tools including endpoint protection, firewalls, email security, and intrusion detection systems.
- Conduct vulnerability scans and coordinate remediation activities.
- Support the organization’s incident response procedures and investigate potential security events.
- Manage identity and access control systems, including user permissions, multi-factor authentication (MFA), and privileged access controls.
- Assist in developing and maintaining cybersecurity policies, standards, and procedures.
- Responsible for documentation of systems architecture, security configurations, and operational procedures.
- Support IT audits, security reviews, and risk assessments.
- Contribute to the organization’s long-term IT security strategy and roadmap.
- Manage backup systems and disaster recovery solutions to ensure data integrity and recoverability.
- Perform regular backup testing and document recovery procedures.
- Support secure data migration and data storage practices.
- Implements ransomware protection and data loss prevention strategies.
- Administer cloud and on-premise infrastructure including servers, networks, and storage systems.
- Manage Microsoft 365, identity services, and collaboration platforms.
- Administer endpoint management systems and oversee patch management and software updates.
- Network administration including VPNs, wireless networks, and firewall configurations.
- Monitor system performance and ensure high availability of critical IT services.
- Lead onboarding and offboarding processes, ensuring secure provisioning and deactivation of user accounts
- Oversee cybersecurity awareness initiatives and staff training programs.
- Provide guidance to staff on secure technology practices and data protection.
- Provide technical support for staff across multiple departments.
JOB COMPETENCIES:
- Team player: Demonstrates cooperative spirit, respects professional boundaries and is successful at sharing responsibilities with others
- Self-led: Knows and completes responsibilities in assigned timelines, asks for clarifications when needed
- Sensitive to the circumstances and needs of the critically ill and seniors, as well as people with mental health and substance abuse issues
- Customer oriented: Works well with all customers (internal staff and external contacts), promotes a positive image of the agency and works diligently to resolve customer issues
- Poised: able to maintain a calm, positive and constructive attitude during interactions with diverse populations, sometimes in challenging situations
- Ethical: Honest, accountable, maintains confidentiality
- Decisive: Thoughtful when considering options, seeks input from others, makes difficult decisions when necessary
- Knowledgeable: Understands facets of job, keeps job knowledge current
- Well organized: Information organized and accessible, maintains efficient work space, manages time well
- Strong communicator: excellent verbal and written communication skills
- Technical savvy: Skilled with computers, proficient with function appropriate technology, learns quickly, uses technology to enhance job performance with the interest and ability to learn new technology
- Leadership I: Completes all assigned tasks in a timely manner and is able to identify projects or work needed for future completion. Anticipates needs before they are assigned. Recognizes themselves as a departmental or function representative
PHYSICAL DEMANDS AND WORK ENVIRONMENT: The physical demands and work environment characteristics described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions
Physical demands: While performing duties of job, incumbent is occasionally required to stand; walk; sit; use hands to finger, handle, or feel objects, tools, or controls; reach with hands and arms; talk and hear. Employee must occasionally lift and/or move up to 30 pounds unassisted. Specific vision abilities required by the job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus.
Work environment: The noise level in the work environment varies from quiet to loud. The temperature in the work environment will range from cold to warm. The work environment will fluctuate between long periods of time in the server room and installation, repair and employee assistance throughout all areas of the agency’s building in San Francisco and occasionally the East Bay.
Salary : $85,000 - $90,000