Manager, Cybersecurity and Infrastructure

This is a fully remote position, open to applicants in Massachusetts.

📋 Description

• Collaborate with Oxfam International InfoSec, affiliate infrastructure teams, local and global business units, personnel, business application managers, vendors, and consultants.

• Direct and uphold the stability, security, and scalability of Oxfam's IT systems.

• Oversee daily IT infrastructure operations and coordinate with the Managed Security Services Provider.

• Monitor, report on, and resolve cybersecurity threats and vulnerabilities.

• Lead the response to security incidents, including investigation, documentation, analysis, and remediation.

• Ensure compliance with security policies, standards, data privacy, and acceptable-use guidelines.

• Manage firewalls, VPN access, and other security infrastructure.

• Conduct vulnerability scans, penetration tests, and subsequent remediations.

• Manage backup and disaster recovery plans for both office and cloud infrastructure.

• Perform regular security audits and assessments.

• Maintain documentation of IT infrastructure, including network diagrams, system architecture, configuration standards, asset inventories, and procedures.

• Supervise on-premise and cloud infrastructure, network devices, servers, and backups.

• Administer Microsoft Intune, including endpoint protection, device provisioning, configuration, compliance, and lifecycle management.

• Manage and support the O365 environment for OUS.

• Oversee patch management for servers, endpoints, and network devices.

• Enhance AV equipment and conference room technology for hybrid and in-person meetings.

• Troubleshoot system performance issues and lead upgrades and improvements.

• Head the helpdesk team, manage ticketing, and provide escalation support.

• Implement and optimize end-user tools, account provisioning, and access controls.

• Assess and procure IT hardware and software.

• Collaborate with vendors regarding quotes, negotiations, and recommendations.

• Maintain IT asset inventories and manage asset lifecycles.

⛳️ Requirements

• BA or BS in Information Technology or Computer Science, or an equivalent combination of experience, education, and training.

• 5+ years of experience in IT infrastructure and cybersecurity roles, including team and vendor management.

• Extensive knowledge of networking principles, firewalls (e.g., Meraki), endpoint protection, cloud services (O365, Azure), and device management (e.g., Intune).

• Proficiency in security operations, including incident response and vulnerability management.

• Familiarity with SIEM tools.

• Hands-on experience with ticketing systems such as Jira and ServiceNow.

• Working knowledge of AV systems for conference rooms.

• Exceptional interpersonal and communication skills.

• Strong critical thinking and analytical abilities.

• Capacity to work independently and apply strategic thinking with technical expertise.

• Expert knowledge of data, information security standards, policies, and architecture.

• Skills in contract/vendor negotiation and relationship management.

• Experience in research, evaluation, and technology strategy proposals.

• Experience in creating, modifying, and producing policy and procedural documentation.

• Experience with technology systems implementations and acting as a liaison between IT and business partners.

• Preferred: experience supporting non-profit, advocacy, or international development organizations.

• Preferred: experience with cloud platforms, architecture, and integrations.

• Preferred: knowledge of PCI, PII, GDPR, HIPAA, and related privacy and security practices.

• Preferred: Azure, Cyber Security, or ITIL certification.

• Satisfactory references and appropriate pre-employment checks.

• Must meet U.S. employment verification requirements through E-Verify.

🏝️ Benefits

• Options for remote work.

• A hybrid and remote work environment.

• Reasonable accommodations for applicants with disabilities.

• Commitment to equal opportunity employment.

• Policies in place for safeguarding and respectful workplace practices.