Cybersecurity & ITGC Compliance Manager

Department: Applied Technology

Status: Exempt, Full Time 

POSITION SUMMARY

The Cybersecurity & ITGC Compliance Manager implements the IT related controls and procedures for Archdiocesan operations and monitors & reports on the application of IT security. The Manager works with all IT process stakeholders, auditors, and management to identify the appropriate controls, write process documentation to define controls’ implementation for various processes, educates staff on controls as well as general cybersecurity subjects, and monitors compliance with published control and security processes.

ESSENTIAL FUNCTIONS

Because all Archdiocesan employees represent the Roman Catholic Church, they are expected to conduct themselves according to the goals and mission of the Church in performing their work.

• Solicit and accept input from audit findings and management to identify control and security gaps in Archdiocesan IT systems
• Match identified gaps to common control frameworks (NIST, ITIL, SANS CIS, etc.) and develop control process and security procedure documentation to address gaps.
• Develop training materials, present them to staff, and conduct training of the employees that will be subject to relevant controls and procedures.
• Monitor compliance to established controls and security procedures and report compliance data to management for further action. Create the appropriate Scorecards for each audience (i.e., Phishing attacks, % of Employees Completed Phishing Training, the pass/fail ratio by Department, and the ADLA Success/Fail on Phishing Tests). Build the same reporting Metrics for Key Cybersecurity risks report ADLA Benchmarks for review and comparison.
• Participate in daily IT operations to gain and maintain current knowledge of all levels of Archdiocesan IT systems.
• Perform other duties as assigned.

MINIMUM QUALIFICATIONS

Education and Experience

Any combination of education and experience likely to provide the required knowledge, skills, and abilities, typically:

• Bachelor's degree required and preferred in an Information Technology related field, or a minimum of 6 years of progressive job experience in the field. Master’s Degree desirable, but not required
•  Relevant certifications (i.e., CompTIA Security+, SSCP, CISSP) or progressive course work preferred.
• Archdiocesan VIRTUS certification and fingerprinting (to be completed after offer)

Knowledge, Skills, and Abilities

Knowledge of:

• Proficiency with the architecture and operation of both on premise and cloud-based hardware, software applications, and network infrastructures.
• This position requires establishing and maintaining good working relationships across ministries and locations around the Archdiocese and understanding the dynamic culture of the organization.

Skill in:

• Effective written and oral communications.
• Strong interpersonal and team-building skills.
• Disciplined and self-directed project planning and execution on assigned projects.
• Strong technical communication skills, both verbal and written, and the ability to tailor content for audiences across the spectrum of education, experience, and sophistication. Bilingual skills in other languages, especially Spanish are desirable but not required.

Ability to:

• Experience and ability in working on multiple projects with various teams simultaneously.
• Valid driver’s license, appropriate and insured motor vehicle, and the willingness to drive to any location within the Archdiocese (Mileage will be compensated at current IRS per-mile rate).

Physical and Environmental Requirements

• Occasionally lift up to 20 pounds.
• Sit for sustained periods of time on a daily basis.
• Perform tasks requiring intermittent bending, stooping, and walking.
• Sustain frequent movement of the fingers, wrists, hands, and arms.