Director of Cybersecurity - PCN 9431

HUMBLE INDEPENDENT SCHOOL DISTRICT Job Description Director of Cybersecurity Page 1 of 5

Primary Purpose The Director of Cybersecurity is responsible for developing, managing, maturing and leading the District's information and cyber security program which primarily includes Governance, Risk and Compliance (GRC) activities, the identification and management of cybersecurity risks, cyber incident detection and response, data breach management, monitoring for information security compliance requirements, development of policies, procedures, and standards to safeguard the District's data, network and computing infrastructure. Apply risk management strategies to safeguard the confidentiality, integrity, and availability of the District's data and computing infrastructure. Qualifications: Education/Certification/Licensure: Bachelor's degree in Cybersecurity, Information Technology, or closely related field from an accredited college or university recognized by the US Department of Education. Must have valid driver's license, good driving record and available transportation during entire workday to travel to sites in the Humble ISD area Special Knowledge/Skills: Knowledge of network and data center facilities and data processing techniques, of personal computer hardware and software technologies, of server hardware and software technologies, network operating systems and cybersecurity tools and solutions. Knowledge of locals and wide area network technologies, protocols and devices, system administration, firewall administration, Wireless Network Administration, Active Directory administration, Web Content Filtering solutions, IIS, EPP/EDR, SIEM, and email security solutions. Knowledge of tools and utilities commonly used in cybersecurity operations, e.g., Nessus, PaloAlto Panorama, CrowdStrike, Bark, ManagedMethods, InfoSec Institute/KnowBe4, O365/Azure, Google Admin, Stellar Cyber SIEM, Wireshark, etc. Knowledge of incident response activities and ability to write an IRP. Knowledge of acceptable human resource/supervisory practices and principles. Knowledge of encryption technologies, identity and access management, secure network architecture, penetration testing, and web application security. Knowledge of cybersecurity and information security control frameworks, including the National Institute of Standards and Technologies (NIST), Risk Management Framework (RMF), NIST Cybersecurity Framework, State of Texas Department of Information Resources Cybersecurity Framework, and the Center for Internet Security. Knowledge of the Family Educational Rights and Privacy Act (FERPA), Children's Online Privacy Protection Act (COPPA), and the Children's Internet Protection Act (CIPA). Skill in performing risk assessments, security assessments and managing identified risks. Skill in developing information system security plans to identify system specific control requirements. Reports to: Chief Technology Officer School/Department: Technology Services Pay Grade: Technology/TC8 Work Days: 226 Wage/hour status: Exempt Created/revised: August 2024 HUMBLE INDEPENDENT SCHOOL DISTRICT Job Description Director of Cybersecurity Page 2 of 5

Skill in managing cybersecurity user awareness training programs. Skill in cybersecurity risk management of third party information technology providers. Skill in communicating effectively, both verbally and in writing. Skill in managing priorities, deadlines, and time critical situations. Skill in directing the work of others. Skill in analyzing complex information. Skill in recognizing technology trends and applying vision for continued growth, efficiency and cost savings Skill in implementing communication and collaboration between and among various areas of the organization to enhance service delivery, program development, and customer satisfaction. Skill in conducting team efforts to design, implement, measure and refine programs and services. Skill in implementing integration and interaction of vertical and horizontal systems to guarantee the support of high student achievement and customer satisfaction. Skill in managing personnel, budget, grants, and operations at a large site. Skill in overseeing, organizing and coordinating a district-wide program Skill in communicating and presenting effectively with diverse groups, both verbally and written, utilizing professionalism, poise, tact and diplomacy technical and complex data and concepts to a varied audience that includes the general public, policy makers, school administrators, teachers, parents, students and other measurement professionals. Ability to monitor and forecast for growth needs. Ability to solve complex problems and build consensus. Ability to remain current on new and emerging technologies Attend training on various software/hardware that is being supported by Humble ISD and maintain a working knowledge of the same. Ability to facilitate group processes in consensus building, conflict resolution, planning, and decision-making Ability to prioritize tasks and coordinate multiple projects to meet specific deadlines Ability to perform duties with attention to detail, speed, accuracy, follow-through, courtesy, cooperativeness under minimum supervision Ability to maintain confidentiality of privileged and sensitive information Ability to comprehend complex systems and technical information and explain complex data and concepts effectively to a wide variety of stakeholders Ability to maintain effective working relationships with a wide variety of District personnel and outside organizations Experience: Five years experience in supporting a managed security service and platform for a large organization Experience with Texas Cyberstar Certification standards Experience with Trusted Learning Environment Standards Major Responsibilities and Duties Cybersecurity Management Support

1. Manage the installation, configuration, operation, maintenance and use of cyber security infrastructure devices, which include Intrusion Prevention System (IPS), Endpoint Protection HUMBLE INDEPENDENT SCHOOL DISTRICT Job Description Director of Cybersecurity Page 3 of 5

Platform Detection & Response (EFF/EDR), Security Information Event Monitoring (SIEM), Vulnerability Scanning, Application Control, Firewall Suite and Data Loss Prevention (DLP), and email security solutions.

2. Perform and manage reviews and risk assessments of new, proposed, or exiting network and computing infrastructure; identify threats, vulnerabilities, risks, and gaps in security controls and develop cybersecurity risk management plans.
3. Collaborate with district stakeholders in the development of cybersecurity control solutions to meet specific operational needs as well as balancing acceptable cyber security risk remediation and mitigation control implementation.
4. Manage and monitor cyber incident activity, respond to cybersecurity incidents with incident response actions to support the restoration of information resources back to operation and identify the root cause of incidents.
5. Manage vulnerability scanning and vulnerability management, remediation and mitigation activities.
6. Manage, perform, and lead the evaluation and identification of cybersecurity solutions for procurements to secure information resources and the District's data.
7. Collaborate and advise with the Data Privacy Committee in performing cybersecurity reviews of proposed third party information technology services or solution providers to identify cybersecurity rusks and acceptable management of risks by third parties.
8. Manage the implementation of the District's cybersecurity awareness training program.
9. Develop policies, procedures, and standards for securing the District's data and computing infrastructure.
10. Develop and maintain the cybersecurity incident response plan.
11. Work closely with the Texas K-12 Student Data Privacy Committee, Texas Chief Technology Officer (CTO) Counsel and Texas Association of School Boards (TASB) in addressing cybersecurity risks.
12. Perform data breach response and reporting in accordance with Texas law.
13. Review and develop cybersecurity controls for third party information technology service providers.
14. Work closely with the District's Safety and Security office and the State of Texas State Identification Bureau Chief for the implementation of Federal Bureau of Investigation (FBI) Criminal Justice Information Services (CJIS) cybersecurity compliance requirements for the protection and control of the District's federally regulated CJIS data.
15. Coordinate departmental activities with other District offices and administrators and provide assistance to requesting departments.
16. Prepare annual operating budget recommendations for the department and implement and monitor assigned budgets. Communication
17. Maintain a positive and effective working relationship with the Superintendent, Board, coworkers, employees, outside agencies and organizations, and the public.
18. Effectively communicates with colleagues.
19. Provide outstanding customer service.
20. Maintain good judgment and decision making when dealing with supervisor, co-workers, District officials and employees, and outside agencies and organizations, and the general public.
21. Develop and implement procedures to ensure that employees are kept well informed of personnel policies, procedures, and programs. Fiscal Management
22. Manage budget and ensure that programs are cost-effective and funds are managed wisely. Monitor and evaluate departmental programs within areas of responsibility for effectiveness and efficiency. HUMBLE INDEPENDENT SCHOOL DISTRICT Job Description Director of Cybersecurity Page 4 of 5

Develop applicable budgetary packages based upon budgetary guidelines and needs identified in applicable department improvement plan(s) for submission to the Chief Technology officer during the budget development process. Monitor, maintain and manage applicable departmental budgets for adherence to budgetary and purchasing procedures, appropriate expenditures, and timeliness. Communicate with subordinate staff information related to the District's financial planning and budget development process.

2. Participates in the budget process, compiles budget(s), and cost estimates based upon documented program needs. Personnel Management
3. Manages, conducts, and makes sound recommendations regarding supervisory activities in the areas of interviewing, selecting, and recommending personnel placement or dismissal, training, professional development, counseling, and performance evaluations with review and approval by the, Chief Technology Officer and the Human Resources Department.
4. Prepares, reviews, and revises job descriptions with approval by the Chief Technology Officer and Human Resources Department. School/Organizational Climate
5. Maintain professional behavior, promote a positive image, appearance, and work ethic to represent the District in a positive manner at all times and work in a team environment that supports the vision and mission of the District.
6. Maintain a positive and effective relationship, good judgment, and decision making with coworkers, supervisors, other district personnel, outside agencies and organizations.
7. Promote an open collegial environment among staff and develop positive staff morale.
8. Promote teamwork by sharing knowledge, providing cross training for employees, cooperating with others, participating in meetings and work groups, and supporting the goals and objectives of the district and department.
9. Demonstrate skill in anticipating, managing and resolving conflict. Policy, Reports, and Law
10. Comply with all applicable federal and state laws, Board of Education rules and local board policy and regulations.
11. Compile, maintain and file all reports and other documents as required. Supervisory Responsibilities
12. Supervises and evaluates performance of professional and/or support staff once assigned to the Director. Other
13. Maintains confidentiality of privileged and sensitive information when received and distributed to appropriate designees as approved by the Chief Technology Officer.
14. Demonstrates effective interpersonal skills through communications with employees, staff and school board members.
15. Attend professional growth activities to maintain awareness of current research and issues in human resources, education, including technology integration and emerging technologies.
16. Attend training on various software/hardware that is being supported by Humble ISD and maintain a working knowledge of the same.
17. Promotes a positive image that supports the mission of the district; works with all human resources personnel to continually improve the professionalism of the total department
18. Performs other duties as may be assigned. HUMBLE INDEPENDENT SCHOOL DISTRICT Job Description Director of Cybersecurity Page 5 of 5

Mental Demands/Physical Demands/Environmental Factors Maintain emotional control under stress Frequent prolonged and irregular work hours Prolonged use of equipment and computers with repetitive hand motions Frequent district-wide travel Occasional region and statewide travel Requires performing tasks including standing, walking, bending, stooping, sitting, pushing, pulling, lifting, twisting, and reaching while lifting Extended hours or non-business hours may be required due to system upgrades, system failures, system maintenance as to need of not interfere or lessen impact with district operations Work location assigned requires physical presence in office Daily attendance and punctuality at work are essential functions of the job The foregoing statements describe the general purpose and responsibilities assigned to this job and are not an exhaustive list of all responsibilities and duties that may be assigned or skills that may be required. Approved By Date Reviewed By Date