Manager, Information Security at Project Open Hand – San Francisco, California

POSITION SUMMARY:

The Manager, Information Security is responsible for managing and protecting the organization’s technology infrastructure, systems, and sensitive data while ensuring reliable day-to-day IT operations. This role plays a critical part in safeguarding client, health, and organizational information in a mission-driven environment.

Working closely with the Director of Information Technology, the Manager, Information Security will monitor infrastructure for threats, maintain system integrity, and implement cybersecurity best practices. Manage servers, networks, end point devices, and security tools. The role supports a secure, resilient technology environment that enables staff to effectively deliver services.

QUALIFICATIONS REQUIRED:

QUALIFICATIONS DESIRED:

• Experience working in nonprofit, healthcare, or public health environments.
• Familiarity with HIPAA security principles or healthcare data protection standards.
• Experience with cloud infrastructure (Azure or similar).
• Knowledge of identity management and multi-factor authentication systems.
• Experience with endpoint management platforms (Intune, etc.).

ESSENTIAL FUNCTIONS AND RESPONSIBILITIES:

• Monitor systems, networks, and endpoints for security threats, vulnerabilities, and suspicious activity.
• Manage and maintain cybersecurity tools including endpoint protection, firewalls, email security, and intrusion detection systems.
• Conduct vulnerability scans and coordinate remediation activities.
• Support the organization’s incident response procedures and investigate potential security events.
• Manage identity and access control systems, including user permissions, multi-factor authentication (MFA), and privileged access controls.
• Assist in developing and maintaining cybersecurity policies, standards, and procedures.
• Responsible for documentation of systems architecture, security configurations, and operational procedures.
• Support IT audits, security reviews, and risk assessments.
• Contribute to the organization’s long-term IT security strategy and roadmap.
• Manage backup systems and disaster recovery solutions to ensure data integrity and recoverability.
• Perform regular backup testing and document recovery procedures.
• Support secure data migration and data storage practices.
• Implements ransomware protection and data loss prevention strategies.
• Administer cloud and on-premise infrastructure including servers, networks, and storage systems.
• Manage Microsoft 365, identity services, and collaboration platforms.
• Administer endpoint management systems and oversee patch management and software updates.
• Network administration including VPNs, wireless networks, and firewall configurations.
• Monitor system performance and ensure high availability of critical IT services.
• Lead onboarding and offboarding processes, ensuring secure provisioning and deactivation of user accounts
• Oversee cybersecurity awareness initiatives and staff training programs.
• Provide guidance to staff on secure technology practices and data protection.
• Provide technical support for staff across multiple departments.

JOB COMPETENCIES:

PHYSICAL DEMANDS AND WORK ENVIRONMENT: The physical demands and work environment characteristics described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions

Physical demands: While performing duties of job, incumbent is occasionally required to stand; walk; sit; use hands to finger, handle, or feel objects, tools, or controls; reach with hands and arms; talk and hear. Employee must occasionally lift and/or move up to 30 pounds unassisted. Specific vision abilities required by the job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus.

Work environment: The noise level in the work environment varies from quiet to loud. The temperature in the work environment will range from cold to warm. The work environment will fluctuate between long periods of time in the server room and installation, repair and employee assistance throughout all areas of the agency’s building in San Francisco and occasionally the East Bay.