Technical Security Manager

Responsibilities

• Maintain and mature the information security program to ensure conformance to standards including ISO 27001, ISO 27018, ISO 42001, GovRAMP, FedRAMP, NIST 800, SOC, and CIS Top Controls
• Facilitate annual independent audits by third-party experts, including audit planning, stakeholder coordination, and remediation
• Plan and manage multiple security improvement projects from requirements through implementation
• Manage document and record control processes and maintain compliance artifacts
• Lead Security Awareness and training programs, including content creation and campaign reporting
• Support business development by responding to security and privacy information requests in proposals
• Perform security risk assessments for software acquisitions, technical services, and new technologies
• Administer GRC tools to track security controls and conformance status
• Conduct enterprise risk assessments and report metrics to senior management
• Manage privacy risks related to cookies, APIs, and policy compliance

Requirements

• Bachelor's Degree in Information Security, Cybersecurity, Computer Science, Engineering, or related field
• Minimum 5 years of hands-on experience in information security
• Deep knowledge of security/privacy frameworks and industry best practices
• Knowledge of privacy laws including GDPR, COPPA, and FERPA
• Proficiency with tools and techniques used to protect against cybersecurity attacks
• Information Security Certifications such as CISSP, GIAC, ISACA, or AWS Security
• Experience with GRC tools
• Demonstrated experience with ISO, GovRAMP, or FedRAMP standards
• Experience conducting risk assessments, gap analysis, and tracking corrective actions

Preferred Qualifications

• PMP certification
• Experience with AI Governance frameworks such as NIST or ISO 42001

About the Company

Cambium Learning Group is an award-winning educational technology solutions leader dedicated to helping all students reach their potential through individualized and differentiated instruction.