Manager - IT

The Manager - IT leads the organization’s information technology (IT) function and supervises IT staff. The Manager - IT is responsible for the security, availability, and performance of all company networks, systems, and audiovisual (AV) technology, and oversees hardware and software testing, procurement, and implementation.

The Manager - IT directs the company’s cybersecurity program, including continuous threat monitoring, employee security awareness training, threat prevention, and incident response and recovery. The Manager - IT also establishes IT policies, procedures, service-level agreements, and performance measures, and provides escalated technical support to employees., * Supervise IT staff, including hiring, training, coaching, assigning work, evaluating performance, and supporting professional development.

• Direct the company’s cybersecurity program, implementing and maintaining security controls aligned with the NIST Cybersecurity Framework and applicable state and federal requirements, including identity and access management, multi-factor authentication, endpoint protection, firewall and email security, and vulnerability and patch management.
• Monitor networks, systems, endpoints, and cloud environments for security threats and anomalies; investigate alerts, assess risk, and take timely action to prevent, contain, and remediate threats.
• Develop, maintain, and regularly test incident response, disaster recovery, and business continuity plans; lead response to and recovery from security incidents and data breaches, including containment, eradication, restoration of systems and data from secure backups, evidence preservation, root cause analysis, and post-incident improvements, in coordination with leadership, legal counsel, insurers, and law enforcement as appropriate.
• Develop and deliver security awareness training, phishing simulations, and threat communications to educate employees on safe practices and reduce organizational risk.
• Direct the deployment, monitoring, maintenance, upgrade, and support of all IT and AV systems, including networks, servers, telecommunications and VoIP systems, firewalls, switches, remote monitoring and management (RMM) and mobile device management (MDM) platforms, data backup and storage, end-user devices, software, peripherals, and office equipment.
• Administer cloud productivity, identity, and directory services, including configuration, user access, and organizational settings aligned with security best practices.
• Develop, maintain, and enforce IT and information security policies, procedures, and standards, including acceptable use and data management, and oversee technical documentation of network environments and IT procedures.
• Establish service-level agreements and key performance indicators for IT services, including helpdesk, desktop, and network support; monitor the helpdesk ticketing system and provide tier-three technical support, referring significant hardware issues to service providers.
• Plan, prioritize, and manage IT projects and systems integration, assigning staff and resources to meet deadlines, and provide progress reports and data to leadership.
• Research, evaluate, test, and procure hardware, software, accessories, and supplies; manage vendor and contractor relationships, contracts, licenses, and service agreements, including evaluating vendor security practices.
• Administer physical security technology, including security camera systems and access control.
• Other duties as assigned., * May be required to report to alternative work location on occasion or travel between sites.
• This job description is not intended to be an all-inclusive list of duties and standards of the position. Incumbents will follow any other instructions, and perform any other related duties as assigned.

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Business Administration, or a related field, required
• Master’s degree in Information Technology, Cybersecurity, or a related field, preferred
• Two years of experience will be considered in lieu of an Associate’s degree, four years of experience will be considered in lieu of a Bachelor’s degree, and six years of experience will be considered in lieu of a Master’s degree, or an equivalent combination of education and experience.
• Cybersecurity certification such as CompTIA Security+, CompTIA CySA+, Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM), preferred
• Networking, systems, or cloud administration certification such as CompTIA Network+, CompTIA A+, or Microsoft Certified: Administrator, preferred, * 5 years of related experience in IT administration, including network and systems administration, required
• 3 years of experience in cybersecurity operations, including monitoring systems and networks for threats, implementing preventive security controls, and educating employees on security awareness, required
• Demonstrated experience responding to and recovering from cybersecurity incidents, such as ransomware, account compromise, or data breaches, including containment, restoration of systems and data, and post-incident review, required
• 2 years of experience supervising staff, strongly preferred
• 7 or more years of related experience in IT administration, preferred
• Experience supporting organizations that serve government clients or maintain confidential client or participant data, preferred

Skills, Knowledge, and Abilities

• Knowledge of cybersecurity frameworks and best practices, including the NIST Cybersecurity Framework, CIS Critical Security Controls, and NIST incident handling guidance
• Knowledge of security technologies and practices, including endpoint detection and response, security information and event management (SIEM) and log monitoring, multi-factor authentication, encryption, email filtering, vulnerability scanning, and secure, isolated backups
• Knowledge of data breach notification and data privacy requirements, and of working with legal counsel, cyber insurance carriers, and law enforcement during an incident
• Knowledge of network infrastructure, including LAN/WAN, firewalls, switches, VPN, wireless, and VoIP telephone systems
• Knowledge of server and desktop operating systems, virtualization, and cloud productivity and identity platforms (e.g., Microsoft 365, Active Directory/Entra ID, Azure)
• Ability to diagnose and resolve complex technical problems and to prioritize and coordinate response activities during security incidents and system outages
• Ability to explain technical risks clearly to leadership and to train non-technical employees
• Ability to develop clear technical documentation, policies, and procedures
• Ability to manage projects, budgets, and vendor relationships
• Ability to maintain confidentiality of sensitive information
• Ability to stay current with emerging technologies, security threats, and best practices
• Ability to lead team adoption of technology and process improvements, including AI-enabled tools, and set expectations for responsible use, quality review, and data protection
• Proficiency in Microsoft Office, including Excel, Word, PowerPoint, and Outlook, * Ability to work evenings and weekends as needed, including after-hours response to security incidents, system outages, and scheduled maintenance.

Public Strategies is a dynamic professional services firm with more than 35 years of experience delivering innovative communications, consulting, technology, events, and project management solutions. Our collaborative team of problem solvers, creatives, technologists, trainers, communicators, and change agents is committed to doing good well.