Senior Director of IT Security

Montgomery County Community College•Blue Bell, PA

1d•Hybrid

About The Position

The Senior Director of IT Security serves as the College’s Information Security Officer (ISO) and is the College’s lead for cybersecurity strategy, governance, and risk management. This is a role for someone who likes complexity, who can see the big picture, and who is willing to dive into the details when the moment calls for it. The Senior Director sets the direction for a secure and resilient technology environment, leads the development and execution of the College’s IT Security Program, and works closely with senior leaders to align security priorities with academic and administrative needs. The Senior Director reports to the Chief Information Officer and plays a central role in strengthening the College’s overall security posture and shaping a campus culture that values awareness, responsibility and shared stewardship. The position is responsible for building and evolving the College’s security strategy in a way that matches the institution’s mission and operational realities. The Senior Director leads a small but dedicated security team of two full-time employees, providing mentorship, structure and day-to-day guidance. The role balances strategic planning with hands on technical work and requires someone who is comfortable guiding staff while also stepping in to solve complex challenges directly. The Senior Director advises institutional leadership on emerging threats, recommends appropriate responses, and drives projects and initiatives that reduce risk to the College. The successful candidate brings sound judgment, technical depth, and the ability to translate security needs into clear and actionable decisions for the institution. This position has college-wide responsibilities and requires travel between all campuses but will be based at the Blue Bell campus. This position has been approved for a flexible work option arrangement. Flexible work options can be ended at any time by the College, Cabinet, and/or supervisors based on employee performance and/or as institutional needs change.

Requirements

Bachelor’s degree in information technology or related field required.
8 years of progressive information technology and/or cybersecurity experience with at least 5 years of supervisory experience.
Hands on experience in security infrastructure systems.
Experience managing partnerships with 3rd party vendors.
Ability to communicate security priorities and risk impacts to technical and non-technical audiences.
Experience in mentoring and developing staff members.
Strong understanding of NIST CSF, risk management practices, and regulatory frameworks relevant to higher education (e.g., FERPA, HIPAA, GLBA, and PCI-DSS).
Advanced understanding of technical and business process controls that ensure the confidentiality, integrity and availability of technology and data.
Execution of risk assessments, security audits, business continuity, vulnerability, and penetration testing.
Ability to work autonomously and make quick and effective decisions.
Implementation of IT security best practices.
Strong interpersonal skills and the ability to effectively communicate with a wide range of individuals and constituencies in a diverse community.
Maintains availability during off-hours, as needed, to provide leadership and decision-making during cybersecurity incidents or other critical events.

Nice To Haves

Master’s Degree preferred.
Experience building, leading, or maturing an institutional security program is preferred.
CISSP, CRISC, CISM, CISA or equivalent senior level cybersecurity certification is preferred.

Responsibilities

Lead the development and execution of the College's Cybersecurity and Information Security Program and multi-year roadmap.
Maintain an enterprise view of technology and data risks and recommend mitigation strategies.
Provide direction for security architecture and key security technologies, including identity and access management, network security, endpoint security, and cloud security.
Lead risk assessments, security audits, business continuity, and disaster recovery planning.
Maintain situational awareness of emerging threats and advise leadership on institutional exposure.
Communicate new threats and trends to the executive team in a manner that facilitates appropriate prioritization and resource allocation of IT security initiatives.
Advise senior leadership on cyber risk, regulatory obligations, and required investments.
Oversee vulnerability management, configuration management, and incident response programs to identify and mitigate risks.
Champion a campus culture of security awareness and shared responsibility.
Guide team members in day-to-day hands-on activities, while maintaining the ability to personally assist with complex or critical issues when necessary.
Actively participate in IT security organizations and maintain professional relationships that facilitate effective and up-to-date management of the IT security program and awareness of current global IT security threats.
Oversee and continuously improve incident response and recovery efforts. This includes leading the forensic investigation of security breaches and assisting with disciplinary and legal matters as necessary.
Manage vendor relationships and third-party risk reviews.
Other duties as assigned.