Director of Cybersecurity Programs & Sector Engagement

NGO Information Sharing and Analysis Center Inc.•,

56d•$115,000 - $150,000•Remote

About The Position

NGO-ISAC is seeking a leader to establish and manage its cybersecurity programs and sector engagement initiatives. This role involves designing the direction for threat intelligence sharing and collective defense, creating programs and resources to enhance member security maturity, and representing NGO-ISAC in various communities. The position is crucial for helping nonprofits prevent and recover from cyberattacks, with a direct impact on the safety and security of individuals and organizations. This is a senior role offering significant ownership and accountability, suitable for a confident expert who values collaboration and feedback. The position is fully remote within the United States, with a preference for candidates on the East Coast due to time zone overlap and occasional in-person events requiring travel. The role is responsible for the output of NGO-ISAC, including curriculum, intelligence products, and technical content, ensuring their accuracy. This function works in concert with Membership (handling member transactions) and Community & Partnerships (managing member relationships, partnerships, and technical assessments of partners) to serve the same organizations.

Requirements

8 or more years in cybersecurity, threat intelligence, or information security.
Experience in collaborative security settings (e.g., ISACs, government partnerships, nonprofits, multi-organization efforts).
Proven ability to translate security expertise into functional programs or services.
Strong understanding of the current threat landscape.
Experience coordinating security efforts across multiple organizations.
Effective communication with both technical and non-technical audiences.
Experience leading teams or programs.

Nice To Haves

Experience with nonprofits, humanitarian organizations, or civil society groups.
Familiarity with frameworks such as NIST CSF, CIS Controls, or ISO 27001.
Familiarity with Traffic Light Protocol, MITRE ATT&CK, or open-source intelligence.
Certifications such as CISSP, GCTI, or CEH.
A degree in information technology, cybersecurity, management, or a related field.
Experience with threat intelligence or information-sharing programs.

Responsibilities

Develop security initiatives tailored to the operational realities and resource constraints of nonprofits.
Design scalable programs such as security assessments, resilience guidance, and training.
Develop and deliver member training, including phishing simulations, incident-response drills for non-technical staff, and executive security briefings.
Identify and proactively address emerging threats to civil society.
Produce practical tools and resources to improve sector-wide security maturity.
Ensure programs deliver measurable value to members.
Collaborate with Community & Partnerships on member needs, program feedback, and content accessibility, with final decision-making authority on publications.
Manage the collection, analysis, and sharing of threat intelligence relevant to nonprofits.
Coordinate intelligence sharing among members.
Grow and manage the intelligence-sharing platform and its governance, coordinating with Community & Partnerships.
Govern intelligence sharing under Traffic Light Protocol, ensuring member identity protection.
Issue alerts and guidance on emerging threats.
Support members during sector-wide incidents.
Maintain relationships with other ISACs and information-sharing networks.
Build relationships with CISA, the National Council of ISACs, and peer ISACs.
Assess the technical suitability of technology and commercial partners.
Participate in working groups and joint initiatives.
Represent NGO-ISAC at conferences, forums, and sector convenings.
Contribute thought leadership on threats facing civil society.
Translate program impact into fundable propositions in partnership with the COO.
Contribute to grant proposals and funder discussions.
Build relationships with partners whose interests align with the sector's security.
Manage and mentor program staff.
Set clear priorities and objectives for the team.
Ensure reliable delivery of programs and services.
Coordinate organizational efforts to support program work.