Manager, Cybersecurity and Infrastructure

This is a fully remote position, open to applicants in Massachusetts.

📋 Description

• Lead and ensure the stability, security, and scalability of Oxfam’s IT systems.

• Collaborate with Oxfam International InfoSec, the infrastructure teams of affiliates, business units, staff, vendors, and consultants.

• Communicate with the managed security services provider to monitor, report, and address cybersecurity threats and vulnerabilities.

• Direct security incident response, which includes investigation, documentation, analysis, and remediation.

• Ensure compliance with security policies, standards, data privacy regulations, and acceptable-use guidelines.

• Oversee firewalls, VPN access, endpoint protections, and security infrastructure.

• Conduct vulnerability scans, penetration tests, security audits, and necessary remediation.

• Maintain backup and disaster recovery plans for both office and cloud infrastructures.

• Develop and enhance IT infrastructure documentation, diagrams, inventories, standards, and procedures.

• Supervise on-premise and cloud infrastructures, networks, servers, and backups.

• Manage Microsoft Intune for secure device provisioning, configuration, compliance, and lifecycle management.

• Administer the O365 environment for OUS.

• Oversee patch management across servers, endpoints, and network devices.

• Optimize AV equipment and conference-room technology to support both hybrid and in-person meetings.

• Troubleshoot system performance and spearhead infrastructure upgrades and enhancements.

• Lead the helpdesk team, manage ticketing, provide escalation support, and ensure adherence to IT procedures.

• Implement and refine end-user tools, account provisioning, and access controls.

• Evaluate and procure IT hardware and software; manage vendors, quotes, negotiations, and IT assets.

⛳️ Requirements

• BA or BS in Information Technology, Computer Science, or an equivalent combination of experience, education, and training.

• Over 5 years of experience in IT infrastructure and cybersecurity roles, including team and vendor management.

• Comprehensive knowledge of networking principles, firewalls (e.g., Meraki), endpoint protection, cloud services (O365, Azure), and device management (e.g., Intune).

• Proficient in security operations, including incident response and vulnerability management.

• Familiarity with SIEM tools.

• Practical experience with ticketing systems (e.g. Jira, Service-Now).

• Working knowledge of AV systems for conference rooms.

• Exceptional interpersonal, written, oral, and presentation communication skills.

• Strong critical thinking and analytical skills.

• Ability to work independently and apply strategic thinking with technical expertise.

• Expert-level understanding of data, information, and security standards, policies, and architecture.

• Skills in contract/vendor negotiation and relationship management.

• Experience in research, evaluation, and technology strategy proposals.

• Familiarity with creating, modifying, and producing policy and procedural documentation.

• Demonstrated experience with technology systems implementations and acting as a liaison between IT and business partners.

• All employment offers are contingent upon satisfactory references and appropriate pre-employment checks.

• Compliance with E-Verify employment eligibility requirements.

🏝️ Benefits

• Options for remote work.

• Reasonable accommodations available for applicants with disabilities.

• Commitment to equal opportunity employment.

• A safeguarding and respectful workplace.

• Pre-employment checks and reference requirements.

• Support for a hybrid and remote workforce.