Supervisor of Information Security/ Cybersecurity

Job Summary

Under the direction of the Executive Director of Technology, the Supervisor of Information Security / Cybersecurity leads the division’s information security and cybersecurity programs to protect NNPS systems, infrastructure, and data assets. This position oversees security policies, risk management, access controls, vulnerability management, incident response, compliance, and security awareness initiatives. The Supervisor collaborates with Technology teams, division stakeholders, and external partners to mitigate risk, strengthen security controls, and ensure alignment with applicable requirements. The position promotes a proactive security culture, continuous improvement, and innovative practices to address emerging threats and support the division’s educational mission.

Essential Duties

1. Lead and oversee the division’s information security and cybersecurity programs, initiatives, and personnel.
2. Establish security priorities, performance objectives, and strategic plans aligned with division goals.
3. Advise the Executive Director of Technology on security risks, resource needs, and improvement opportunities.
4. Oversee security monitoring, system protection, identity and access management, and implementation of security controls.
5. Facilitate the coordination of Technology teams to maintain secure networks, systems, applications, and infrastructure.
6. Ensure appropriate access controls, system configurations, and security documentation are maintained.
7. Identify, assess, prioritize, and mitigate cybersecurity risks and vulnerabilities.
8. Oversee security assessments, audits, compliance reviews, and corrective action plans.
9. Maintain security standards aligned with applicable regulations, division policies, and recognized cybersecurity frameworks.
10. Develop, implement, and maintain security incident response procedures.
11. Manage the investigation, containment, remediation, and recovery of security incidents.
12. Communicate significant incidents, risks, and recommended actions to the Executive Director of Technology.
13. Develop, maintain, and enforce information security policies, procedures, standards, and controls.
14. Ensure appropriate safeguards protect sensitive student, employee, and division data.
15. Evaluate security risks associated with technology implementations, data sharing, and system integrations.
16. Develop and oversee cybersecurity awareness, training, and communication initiatives.
17. Promote secure technology practices, responsible data handling, and a culture of shared security accountability.
18. Provide guidance and support to personnel regarding security policies, access, and technical concerns.
19. Serve as the primary operational liaison for cybersecurity matters involving internal departments, vendors, and external partners.
20. Evaluate third-party security risks and coordinate appropriate safeguards for vendor access, applications, and services.
21. Evaluate emerging threats, technologies, and security solutions to strengthen the division’s security posture.
22. Identify opportunities to automate security processes, improve threat detection, and enhance operational efficiency.
23. Integrate appropriate security controls into emerging technology initiatives, including artificial intelligence and cloud services.
24. Supervise, develop, and evaluate assigned information security and cybersecurity personnel.
25. Establish performance expectations, assign responsibilities, and monitor completion of security initiatives.
26. Promote professional development, technical proficiency, collaboration, and accountability.
27. Prepare security reports, performance metrics, risk assessments, and executive briefings.
28. Maintain accurate documentation of incidents, audits, vulnerabilities, access reviews, and remediation activities.
29. Track security initiatives and communicate significant risks, outstanding issues, and program progress to the Executive Director of Technology.

Minimum Qualifications (Knowledge, Skills and/or Abilities Required)

Bachelor’s degree in information technology, cybersecurity, information systems, computer science, or a closely related field, or an equivalent combination of education, training, and relevant professional experience. Progressively responsible experience in information security, cybersecurity, information technology operations, systems administration, or a related technical discipline. Demonstrated experience supporting or implementing security controls, conducting security assessments, managing technical risks, or responding to security incidents. Experience developing or maintaining technical documentation, policies, procedures, or security-related reports. Demonstrated ability to collaborate with technical teams and communicate security requirements to organizational stakeholders. Experience leading projects, coordinating technical initiatives, mentoring personnel, or supervising staff is preferred. Relevant professional certifications are desirable to include, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), CompTIA Security+, Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Auditor (CISA), GIAC certifications relevant to cybersecurity operations, incident response, or security management, Other relevant cybersecurity, information assurance, or technology leadership certifications.

To view the full job description, visit https://sbo.nn.k12.va.us/hr/jobs/descriptions.html

The Newport News Public Schools prohibits discrimination on the basis of race, color, religion, sex, ethnicity, national origin, age, disability, pregnancy and childbirth, martial status of any other basis prohibited by las. (Reference: School Board Policies 2-33, 4-4. and 4-6).

For further information regarding the position's compensation, please visit this link, NNPS COMPENSATION.