Manager, Cybersecurity and Infrastructure at Oxfam America in Boston, MA, United States

Job description

• Job Description
• The Cybersecurity and Infrastructure Manager lead and maintain the stability, security, and scalability of the organization’s IT systems. This role is responsible for day-to-day IT infrastructure operations, coordinate closely with our Managed Security Services Provider (MSSP), respond to security incidents, manage firewall and endpoint protections, and ensure adherence to security policies and procedures. In addition, the role supervises helpdesk operations and office infrastructure including procurement of AV/IT equipment.
• This position is essential to maintaining a secure and efficient digital environment and provide support to a hybrid mission-driven workforce across multiple locations.

Responsibilities

• Cybersecurity and Risk Management (30%)
• •Serve as primary liaison with Oxfam’s MSSP to monitor, report on, and resolve cybersecurity threats and vulnerabilities.
• •Lead incident response efforts to security in collaboration with Senior Director of TIM, Oxfam America’s CISO as well as OI InfoSec Lead, ensuring proper investigation, documentation, analysis, and remediation.
• •Maintain and ensure adherence and compliance of security policies, standards, and practices, including data privacy and acceptable use guidelines.
• •Manage security infrastructure, such as firewalls and policies, and VPN access in line with global Oxfam security protocols and applicable regulatory requirements.
• •Perform vulnerability scans, pen tests, and appropriate remediations.
• •Manage and maintain backup and disaster recovery plans for in-office and cloud infrastructure.
• •Responsible for conducting regular security audits and assessments.
• •Develop, maintain, and continuously improve IT infrastructure documentation, including network diagrams, system architecture, configuration standards, asset inventories, and operational procedures.
• Infrastructure Management (30%)
• •Oversee the operation and maintenance of on-premise and cloud-based infrastructure, including network devices, servers, and backups.
• •Maintain, administer and manage endpoint protection systems including Microsoft Intune, ensuring secure device provisioning, configuration, compliance, and lifecycle management.
• •Manage and support 0365 environment for OUS.
• •Oversee the organization's patch management program, ensuring timely deployment of operating system, application, firmware, and security updates across servers, endpoints, and network devices.
• •Assess, maintain, and ensure the optimization of AV equipment and conference room technologies for seamless hybrid and in-person meetings experience, incorporating up-to-date tools and best practices.
• •Ensure high quality system performance and troubleshoot issues as needed.
• •Collaborate with Oxfam’s global IT team on infrastructure initiatives and compliance.
• •Ensure high quality system performance and troubleshoot issues as needed.
• •Collaborate with Oxfam’s global IT team on infrastructure initiatives and compliance.
• •Lead the implementation of upgrades and improvements.
• Helpdesk Staff Management and Technical Support (30%)
• •Lead the helpdesk team effectively, ensuring timely and efficient technical support for staff as defined by our service level agreements
• •Oversee ticket management and provide escalation support as needed.
• •Ensure helpdesk staff follow established IT policies and procedures consistently. Implement and optimize end-user tools, account provisioning, and access controls systems.
• •Ensure effective support for hybrid and in-person meetings, including the AV equipment and conference room technologies set-ups.
• Procurement and Asset Management (10%)
• •Lead assessment and procurement of IT hardware and software for new hires including upgrades, and replacements.
• •Collaborate with key vendors to develop quotes for infrastructure services, review, negotiate, and provide recommendations.
• •Maintain accurate inventory records and manage the IT lifecycle assets.

Requirements

• •BA or BS in Information Technology or Computer Science or equivalent combination of experience, education and training.
• •5+ years of experience in IT infrastructure and cybersecurity roles, including team and vendor management.
• •In-depth knowledge of networking principles, firewalls (e.g., Meraki), endpoint protection, cloud services (O365, Azure), and device management (e.g., Intune)
• •Proficient in security operations, including incident response, vulnerability management, and familiarity with SIEM tools
• •Hands-on experience with ticketing systems (e.g. Jira, Service-Now).
• •Working knowledge of AV systems for conference rooms
• •Excellent interpersonal skills; ability to communicate effectively, orally, in writing and presentation.
• •Critical thinking and analytical capabilities with a solution-oriented mindset.
• •Ability to operate independently and apply strategic thinking with technical depth.
• •Expert-level in data, information and security standards, policies and architecture.
• •Skilled in contract/vendor negotiation and relationship management.
• •Experience in research, evaluation and technology strategy proposals.
• •Experience in creating, modifying, and producing Policy and Procedural documentation.
• •Proven experience with technology systems implementations and effectively liaise between IT and business partners.
• •Experience supporting non-profit, advocacy, or international development organizations.
• •Experience with cloud platforms, architecture (Azure, AWS, PaaS, SaaS, O365, Box, etc.) and integrations.
• •Knowledge and operational understanding of applicable privacy and security practices and laws (good understanding of PCI, PII, GDPR, HIPPA, etc.).
• •Certification in: Azure, Cyber Security, ITIL

Skills

Required

• AV systems for conference rooms