Cybersecurity & ITGC Compliance Manager

Archdiocese of Los Angeles•Los Angeles, CA

6d•Onsite

About The Position

The Cybersecurity & ITGC Compliance Manager implements the IT related controls and procedures for Archdiocesan operations and monitors & reports on the application of IT security. The Manager works with all IT process stakeholders, auditors, and management to identify the appropriate controls, write process documentation to define controls’ implementation for various processes, educates staff on controls as well as general cybersecurity subjects, and monitors compliance with published control and security processes.

Requirements

Bachelor's degree required and preferred in an Information Technology related field, or a minimum of 6 years of progressive job experience in the field.
Proficiency with the architecture and operation of both on premise and cloud-based hardware, software applications, and network infrastructures.
This position requires establishing and maintaining good working relationships across ministries and locations around the Archdiocese and understanding the dynamic culture of the organization.
Effective written and oral communications.
Strong interpersonal and team-building skills.
Disciplined and self-directed project planning and execution on assigned projects.
Strong technical communication skills, both verbal and written, and the ability to tailor content for audiences across the spectrum of education, experience, and sophistication.
Experience and ability in working on multiple projects with various teams simultaneously.
Valid driver’s license, appropriate and insured motor vehicle, and the willingness to drive to any location within the Archdiocese (Mileage will be compensated at current IRS per-mile rate).

Nice To Haves

Master’s Degree desirable, but not required
Relevant certifications (i.e., CompTIA Security+, SSCP, CISSP) or progressive course work preferred.
Bilingual skills in other languages, especially Spanish are desirable but not required.

Responsibilities

Solicit and accept input from audit findings and management to identify control and security gaps in Archdiocesan IT systems
Match identified gaps to common control frameworks (NIST, ITIL, SANS CIS, etc.) and develop control process and security procedure documentation to address gaps.
Develop training materials, present them to staff, and conduct training of the employees that will be subject to relevant controls and procedures.
Monitor compliance to established controls and security procedures and report compliance data to management for further action. Create the appropriate Scorecards for each audience (i.e., Phishing attacks, % of Employees Completed Phishing Training, the pass/fail ratio by Department, and the ADLA Success/Fail on Phishing Tests). Build the same reporting Metrics for Key Cybersecurity risks report ADLA Benchmarks for review and comparison.
Participate in daily IT operations to gain and maintain current knowledge of all levels of Archdiocesan IT systems.
Perform other duties as assigned.