Assistant Director of Infrastructure and Security - Springfield Technical Community College

The Assistant Director of Infrastructure and Security (ADIS) is an integral member of the infrastructure team, responsible for monitoring, identifying, investigating and responding to network and system incidents in support of college-wide information security efforts. Reporting to the Sr. Director of Infrastructure and Security & CISO, the ADIS will assist in planning, implementing and monitoring the college's IT infrastructure and security tools to assure that the network and servers are reliable, secure, and available.

This is a hands-on role which involves overseeing information systems, projects, policies and processes including; virus software, password and access control systems, and vulnerability management software. This position assists the Sr. Director with managing technical staff daily workload and projects.

RESPONSIBILITES:

• Monitor, review and analyze network and server logs for potential security incidents, investigate security events, recommend modification to proactively enhance network and system security to prevent threats.
• Implement and manage enterprise multi-factor authentication (MFA) technology to enhance password security throughout the organization.
• Monitor EDR/MDR and other vulnerability management software.
• Respond to security incidents, assist with incident investigation, gather forensic evidence and prepare incident reports.
• Manage information security training program, user accounts, and related training notifications.
• Develop and maintain security documentation, maintain IT security website and department communications related to information security standards, procedures and alert notices.
• Review and verify that base computer and server images meet security standards.
• Oversee Infrastructure and Security project resources, including internal stakeholders and vendors to ensure project deliverables and security requirements are met.
• Facilitate change control processes and ensure proper communication to IT staff and impacted users.
• Maintain technical proficiency through ongoing training, seminars and conferences, and investigate new advancements in cyber security, IT systems, and cloud technologies.

• Bachelor's degree and a minimum of 3 years of relevant network and enterprise system security is required. Associates degree with 5-7 years or experience will be considered.
• One or more relevant security or network certification (e.g., A , CISSP, CEH - Certified Ethical Hacker, GIAC Security Essentials, CompTIA Security , Microsoft, VMware, Cisco, etc.) is required.
• Must have strong knowledge of information security, systems and network administration; experience with Microsoft Windows 2016 server, VMware, Active Directory, and SSO.
• Must possess an in-depth understanding of cyberattacks, phishing, malware, and other types of malicious cyber activity.
• Strong verbal and written communication skills; strong interpersonal skills.

EQUIVALENCY STATEMENT:

Applicants who do not meet the qualifications as stated above are encouraged to put in writing precisely how their background and experience have prepared them with the equivalent combination of education, training and experience required for the responsibilities of this position.

Salary: $105,000 - $110,000 annually
Benefits: Yes, Full-Time Position
Union: Non-Unit Professional (NUP)
Grant Funded: No
Closing Date: Open Until Filled

All candidates must have legal authorization to work in the United States. Springfield Technical Community College is not sponsoring H1B Visa.

INFORMATION AWARENESS SECURITY TRAINING:

Candidates for employment should be aware that all STCC employees are required to complete Information Awareness Security Training within thirty days of their orientation date and annually thereafter.