Manager, Cybersecurity and Infrastructure

This is a fully remote position, open to applicants in Massachusetts.

📋 Description

• Collaborate with Oxfam International InfoSec, affiliate infrastructure teams, business units, staff, application managers, vendors, and consultants.

• Direct and ensure the stability, security, and scalability of IT systems.

• Coordinate with the managed security services provider to oversee, report, and address cybersecurity threats and vulnerabilities.

• Spearhead security incident response, investigation, documentation, analysis, and remediation efforts.

• Uphold security policies, standards, practices, privacy requirements, and acceptable-use guidelines.

• Administer firewalls, VPN access, endpoint protection, vulnerability scans, penetration tests, backups, and disaster recovery processes.

• Conduct security audits and assessments to ensure compliance and security integrity.

• Maintain documentation for infrastructure, including network diagrams, system architecture, configuration standards, asset inventories, and operational procedures.

• Oversee both on-premise and cloud infrastructure, network devices, servers, and backup solutions.

• Manage Microsoft Intune, focusing on endpoint provisioning, configuration, compliance, and lifecycle management.

• Supervise the O365 environment for Oxfam America.

• Oversee patch management for servers, endpoints, and network devices.

• Enhance audiovisual equipment and conference-room technology for hybrid and in-person meetings.

• Troubleshoot system issues and lead upgrades and improvements to the infrastructure.

• Guide the helpdesk team in ticket management, escalation support, end-user tools, account provisioning, and access controls.

• Acquire IT hardware and software, negotiate vendor quotes, and manage IT asset inventories and lifecycles.

⛳️ Requirements

• BA or BS in Information Technology or Computer Science, or an equivalent combination of experience, education, and training.

• Over 5 years of experience in IT infrastructure and cybersecurity roles, including team and vendor management.

• Comprehensive understanding of networking principles, firewalls like Meraki, endpoint protection, cloud services such as O365 and Azure, and device management using Intune.

• Proficient in security operations, incident response, vulnerability management, and familiar with SIEM tools.

• Practical experience with ticketing systems such as Jira and ServiceNow.

• Familiarity with audiovisual systems for conference rooms.

• Exceptional oral, written, and presentation communication skills.

• Strong critical thinking, analytical abilities, and a solution-oriented mindset.

• Capability to work independently while applying strategic thinking with technical expertise.

• Expert-level understanding of data, information, and security standards, policies, and architecture.

• Skills in contract and vendor negotiation and relationship management.

• Experience in researching, evaluating, and proposing technology strategies.

• Background in creating, modifying, and producing policy and procedural documentation.

• Proven track record in implementing technology systems and serving as a liaison between IT and business partners.

• Preferred: experience supporting nonprofit, advocacy, or international development organizations.

• Preferred: familiarity with Azure, AWS, PaaS, SaaS, O365, Box, and integrations.

• Preferred: knowledge of PCI, PII, GDPR, HIPAA, and related privacy and security practices and laws.

• Preferred: certification in Azure, cybersecurity, or ITIL.

🏝️ Benefits

• Option for remote work.

• Opportunities for professional development and continuous learning.

• Reasonable accommodations for applicants with disabilities.

• Commitment to an equal opportunity and inclusive workplace.

• Policies ensuring safeguarding and a respectful workplace.