The Town of Needham and Needham Pubic Schools seeks a creative and collaborative an Cybersecurity Compliance Coordinator.

Under the direction of the Enterprise Applications Manager,plays a vital role in protecting the digital assets, data, and infrastructure of both the Town of Needham and Needham Public Schools. Rather than focusing on hands-on technical engineering, this position focuses on the governance, risk, compliance and project management side of cybersecurity. This position is responsible for coordinating cybersecurity programs, maintaining security policies and procedures, supporting incident response activities, promoting cybersecurity awareness, and assisting departments in improving security practices across municipal and school operations.

The role serves as a central point of coordination for cybersecurity governance and operational readiness, working collaboratively with IT staff, school administrators, municipal departments, vendors, and external partners. This is a full time in-person position with occasional remote work capabilities.
Essential Duties and Responsibilities
Cybersecurity Governance & Compliance

• Develop, maintain, and update cybersecurity policies, standards, procedures, and documentation.
• Assist with implementation and tracking of cybersecurity best practices and compliance requirements.
• Coordinate periodic cybersecurity assessments and audits.
• Maintain inventories of systems, applications, technology assets, and associated cybersecurity risks and vulnerabilities.
• Track remediation efforts and work with IT staff and vendors to address identified vulnerabilities.

Security Awareness & Training

• Coordinate cybersecurity awareness and training programs for town and school staff.
• Develop educational materials and communications related to cybersecurity best practices, phishing awareness, password security, and data protection and provide end user training.
• Support phishing simulation and user awareness initiatives.
• Promote a culture of cybersecurity awareness across all departments.

Incident Response & Risk Management

• Coordinate cybersecurity incident response activities and documentation.
• Provide end user support for cybersecurity incidents.
• Assist in investigation, tracking, escalation, and resolution of security incidents.
• Maintain incident response procedures and reporting documentation.
• Coordinate communications with internal stakeholders and external partners during security incidents as appropriate.
• Support business continuity and disaster recovery planning efforts.

Program Coordination & Administration

• Serve as a liaison between IT staff, departments, school personnel, vendors, and external cybersecurity resources.
• Provide guidance and recommendations to municipal and school department leaders and boards regarding security protocols and emerging digital threats.
• Assess and monitor third-party vendor cybersecurity risks.
• Assist with cybersecurity-related projects and initiatives.
• Maintain records, reports, metrics, and dashboards related to cybersecurity activities and program effectiveness.
• Monitor emerging cybersecurity risks and communicate relevant information to leadership and staff.
• Participate in technology planning and security-related meetings.

Qualifications
Education and Experience

• Bachelor's degree in Information Technology, Cybersecurity, Public Administration, Business Administration, or a related field preferred.
• Equivalent combination of education and relevant experience may be considered.
• Experience in IT coordination, cybersecurity administration, compliance, project management, or related technology support roles preferred.
• Experience in a municipal government, K-12 education, or public-sector environment is desirable.

Knowledge, Skills, and Abilities

• Understanding of cybersecurity principles, risk management, and information security best practices.
• Strong organizational and project coordination skills.
• Excellent written and verbal communication skills.
• Ability to explain technical and cybersecurity concepts to non-technical users.
• Familiarity with cybersecurity frameworks, vulnerability management, and incident response processes.
• Ability to manage multiple priorities and work collaboratively across departments.
• Proficiency with standard business and IT productivity tools.
• Ability to stay up-to-date technically and apply new knowledge to the job. Includes adapting to and mastering new applications and processes implemented by the department.
• Ability to respond to urgent calls on a 24/7 basis and to work off-hours shifts.
• Ability to follow policy and procedures.
• Ability to engage in effective communication, collaboration, and teamwork with individuals from diverse backgrounds, cultures, and perspectives, while demonstrating respect for their differences.
• Ability to work independently and as part of a team.
• Customer service-oriented mindset.

Supervision Received:

Works independently, reporting to the Enterprise Applications Manager.

Supervision Exercised:

No direct supervision, although works with a variety of school employees from all organizational levels and departments.

Job Environment:

Works in a typical office environment, with moderate noise and occasional interruptions.

Physical Requirements:

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee is frequently required to work at a desk; regularly convey information to staff, vendors, and the public; regularly move about inside the office to access file cabinets and office machinery; and traverse stairs. The employee must occasionally lift and/or move objects weighing up to 10 pounds, such as supplies, folders, and books. Ability to operate a keyboard at efficient speed and to view computer screens for extended periods of time. Operates motor vehicles. Ability to operate standard office equipment.

(This job description does not constitute an employment agreement between the employer and employee and is subject to change by the employer as the needs of the employer and requirements of the job change.)

Work Year:

This position has a work year of 260 days, at 8 hours per day. In person work with occasional remote capabilities if authorized by supervisor.

Salary Information:

FLSA: Exempt

Salary is determined by experience, Grade J ranging from $100,283.43- $114,662.08