Cybersecurity, Data Privacy Engineer

About the role

The Cybersecurity and Data Privacy Specialist is responsible for ensuring the overall security compliance of the district network, servers, devices, technology services, data, and users in accordance with established Information Technology guidelines and best practices. This includes network security, network threat hunting, network device security hardening, investigation into cyber security incidents, and offering security best practices for all IT-based district solutions.

Responsibilities

• Assist with the administration of district policies regarding use of computers and data access (e.g. updating virus software, setting passwords, etc.) for the purpose of ensuring compliance with district policy and departmental guidelines.
• Advise and recommend security best practices for off-site hosting for the purpose of ensuring security of the district network and devices.
• Advise and recommend account security features and configurations (e.g. protocols, security features for purchasing technology solutions, etc.) for the purpose of ensuring essential application security features and measures are in place increasing district account and network security.
• Assess data from multiple device management systems (e.g. gather, correlate, and identify devices of concern, coordinating with other team members, etc.) for the purpose of remediating systems that indicate they may have security issues or have been compromised devices that are not performing properly.
• Conduct security tests, review results, and recommend best practices in collaboration with the Technology leadership team (e.g. for Session, Presentation, and Application layers of the OSI model, etc.) for the purpose of identifying network and computer device vulnerabilities.
• Investigate and document security breaches and other cyber security incidents for the purpose of ensuring future incidents can be avoided.
• Maintain a variety of manual and electronic files and/or records (e.g. permission levels, network identification, security access, licenses, work logs, etc.) for the purpose of documenting activities, providing reference and audit trails.
• Maintain security measures (actions) (e.g. regulating access to confidential data, and prevent unauthorized modifications, destruction and/or disclosure of information, etc.) for the purpose of ensuring availability of desktop and server functionality for all users.
• Monitor the network security systems for the purpose of ensuring issues associated with vulnerabilities and threat hunting are addressed.
• Participate in meetings, workshops, and/or trainings for the purpose of conveying and/or gathering information required to perform job functions.
• Prepare a variety of written materials (e.g. procedures, documentation, reports, memos, letters, etc.) for the purpose of documenting activities, providing written reference, and/or conveying information.
• Provide training and inservice in general computer use and/or security, software applications, and file server operations for the purpose of ensuring the efficient use of computers and/or software application.
• Research current and emerging technologies for the purpose of improving District functionality.
• Research software applications for the purpose of providing comprehensive forensic reports as needed in accordance with the district's technology needs.
• Respond to requests for help, repairs, training, and/or potential upgrades, etc. by telephone or e-mail for the purpose of providing information, scheduling appointments and/or referring to alternate resources.
• Respond to inquiries from a variety of district personnel for the purpose of providing support, technical advice and operational assistance.
• Serve as advisor to the Student Data Security Committee for the purpose of ensuring proper protocols and actions are utilized to secure student data.
• Build privacy into technology systems and products using privacy by design principles.
• Ensure adherence to industry standards and privacy regulations.
• Collaborate with design, product, IT, and legal and compliance teams, acting as a liaison across teams and departments.
• Build infrastructure supporting data privacy through the right software applications and best practices.
• Analyze and improve software designs or operating procedures from a privacy perspective, identifying any system vulnerabilities and reducing future privacy risk through the implementation of privacy controls.
• Evaluate third-party vendors, understanding the benefits and risks of partnerships.

Qualifications

• CISM, CISSP, CCNP Security, Security+, COMPTIA Security or equivalent experience
• CDPSE, CIPP, CIPM, CDP or equivalent experience
• Job related experience within a specialized field is preferred in Cybersecurity and Data Privacy
• Bachelor degree in a job-related area