Information Security Manager

The Information Security Manager leads the design, implementation, and continuous improvement of Gateway Technical College’s information security systems, tools, and operational processes.

Working under the direction of the Director of Information Technology, this position provides technical leadership for cybersecurity operations. The manager develops security capabilities, integrates technology solutions, improves security workflows, and supports the effective monitoring, administration, and response associated with security controls across the College’s technology environment. This is both a leadership and hands-on technical role. The Information Security Manager supervises the Cybersecurity team, establishes operational standards, develops team capabilities, and leads initiatives that strengthen security operations and institutional resilience.

How You Will Make an Impact

• Strengthen Gateway’s cybersecurity capabilities by designing, implementing, and improving security technologies, integrations, tools, and operational processes.
• Improve incident readiness by leading cybersecurity workflows and strengthening detection, investigation, response, and remediation practices.
• Build the Cybersecurity team’s technical capacity through mentorship, guidance, training, and consistent operational standards.
• Improve security efficiency and risk-management outcomes through automation, emerging technologies, compliance support, and continuous improvement., * Lead the administration, maintenance, and continuous improvement of cybersecurity systems, platforms, tools, and workflows.
• Design, configure, integrate, and maintain security technologies and controls.
• Develop security procedures, playbooks, documentation, workflows, and operational standards.
• Monitor alert management, platform administration, escalation processes, and system configurations.
• Develop automation, scripts, integrations, and appropriate AI-assisted tools that improve security operations and reduce manual processes.

Risk Analysis and Decision-Making

• Evaluate cybersecurity risks, vulnerabilities, security events, and technology capabilities.
• Analyze alerts, incident findings, configurations, and threat information to determine appropriate response and remediation strategies.
• Assess security technologies, tools, and processes and recommend meaningful improvements.
• Troubleshoot complex security challenges, identify root causes, and develop sustainable solutions.
• Identify gaps and support alignment with institutional policies, compliance requirements, and industry standards.

Projects and Process Improvement

• Lead cybersecurity initiatives, technology improvements, and security-enhancement projects.
• Define project requirements, technical approaches, timelines, and implementation activities.
• Coordinate with IT teams, vendors, and institutional partners to manage dependencies and achieve successful outcomes.
• Monitor progress, identify risks or barriers, and adjust implementation plans when needed.
• Improve workflows and automation practices to increase operational efficiency, consistency, and effectiveness., * Provide technical leadership, mentorship, and professional-development support to Cybersecurity team members.
• Build collaborative relationships with IT teams, institutional partners, vendors, and other stakeholders.
• Communicate security risks, recommendations, and technical information clearly to technical and nontechnical audiences.
• Provide consultation and guidance regarding cybersecurity tools, controls, processes, and best practices.
• Contribute to cybersecurity-awareness resources for faculty, staff, and students.
• Collaborate with internal teams during security events, investigations, and improvement efforts., * Maintain current knowledge of cybersecurity trends, emerging technologies, industry practices, and evolving threats.
• Participate in institutional committees, technology initiatives, and cross-functional efforts.
• Perform other duties as assigned in support of departmental and institutional priorities.

• An associate degree in computer science, information security, cybersecurity, information technology, or a related field; or an equivalent combination of education, training, and experience.
• At least five years of progressive information technology experience, including at least four years focused on information security, cybersecurity operations, network security, or a related security discipline.
• Experience implementing and administering modern information security technologies, developing or supporting security policies and procedures, conducting risk assessments, and improving security operations.
• Broad technical knowledge and hands-on experience across multiple IT domains, such as systems administration, network operations, cloud or software-as-a-service platforms, identity and access management, infrastructure, or data-center operations.
• Experience using PowerShell, Python, or a comparable language or platform to develop scripts, automation tools, or integrations that improve security or IT operations., This position primarily works in an office and technology-based environment with continuous computer-screen exposure, keyboarding, sitting, and near-visual work.
• Frequent verbal communication and workplace interruptions.
• Occasional standing, driving, and work in stressful situations.
• Frequent lifting or carrying of items weighing up to 10 pounds.
• Occasional lifting or carrying of items weighing 11 to 20 pounds.
• Occasional pushing or pulling of items weighing up to 40 pounds.

Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions of the position.