Supervisor of Information Security/ Cybersecurity

Newport News Public Schools is seeking a Supervisor of Information Security / Cybersecurity to lead NNPS information security and cybersecurity programs under the direction of the Executive Director of Technology. This onsite role is focused on protecting systems, infrastructure, and data assets through strong security governance, risk management, monitoring, incident response, and compliance, supported by clear policies and ongoing security awareness.

What you’ll lead

• Oversee NNPS information security and cybersecurity programs, initiatives, and personnel in coordination with Technology leadership.
• Set security priorities, performance objectives, and strategic plans aligned with division goals.
• Advise the Executive Director of Technology on security risks, resource needs, and improvement opportunities.
• Ensure effective security monitoring, system protection, identity and access management, and the implementation of security controls.
• Coordinate Technology teams to maintain secure networks, systems, applications, and infrastructure.
• Maintain appropriate access controls, secure system configurations, and security documentation.

How you’ll protect people and data

• Identify, assess, prioritize, and mitigate cybersecurity risks and vulnerabilities.
• Oversee security assessments, audits, compliance reviews, and corrective action plans.
• Maintain security standards aligned with applicable regulations, division policies, and recognized cybersecurity frameworks.
• Ensure safeguards protect sensitive student, employee, and division data.
• Evaluate security risks related to technology implementations, data sharing, and system integrations.

Incident readiness and continuous improvement

• Develop, implement, and maintain security incident response procedures.
• Manage security incident investigation, containment, remediation, and recovery.
• Communicate significant incidents, risks, and recommended actions to the Executive Director of Technology.
• Prepare security reports, performance metrics, risk assessments, and executive briefings.
• Maintain accurate documentation of incidents, audits, vulnerabilities, access reviews, and remediation activities.
• Track security initiatives and communicate program progress, outstanding issues, and significant risks.

Security culture, third parties, and emerging threats

• Develop, maintain, and enforce information security policies, procedures, standards, and controls.
• Oversee cybersecurity awareness, training, and communication initiatives.
• Promote secure technology practices, responsible data handling, and shared security accountability.
• Serve as the primary operational liaison for cybersecurity matters involving internal departments, vendors, and external partners.
• Evaluate third-party security risks and coordinate safeguards for vendor access, applications, and services.
• Assess emerging threats, technologies, and security solutions to strengthen the division’s security posture.
• Identify opportunities to automate security processes, improve threat detection, and enhance operational efficiency.
• Integrate appropriate security controls into emerging technology initiatives, including artificial intelligence and cloud services.

Team leadership

• Supervise, develop, and evaluate assigned information security and cybersecurity personnel.
• Establish performance expectations, assign responsibilities, and monitor completion of security initiatives.
• Promote professional development, technical proficiency, collaboration, and accountability.
• Provide guidance and support to personnel regarding security policies, access, and technical concerns.

Requirements

• Bachelor’s degree in information technology, cybersecurity, information systems, computer science, or a closely related field, or an equivalent combination of education, training, and relevant professional experience.
• Progressively responsible experience in information security, cybersecurity, information technology operations, systems administration, or a related technical discipline.
• Demonstrated experience supporting or implementing security controls, conducting security assessments, managing technical risks, or responding to security incidents.
• Experience developing or maintaining technical documentation, policies, procedures, or security-related reports.
• Demonstrated ability to collaborate with technical teams and communicate security requirements to organizational stakeholders.
• Experience leading projects, coordinating technical initiatives, mentoring personnel, or supervising staff is preferred.
• Relevant professional certifications are desirable to include: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), CompTIA Security+, Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Auditor (CISA), GIAC certifications relevant to cybersecurity operations, incident response, or security management, or other relevant cybersecurity, information assurance, or technology leadership certifications.

Location: Newport News, VA (onsite)

Technologies: artificial intelligence, cloud services, CISSP, CISM, CompTIA Security+, CRISC, CISA, GIAC