Cybersecurity Administrator

JOB TITLE: Cybersecurity Administrator REPORTS TO: Assistant Director of IT LOCATION: Worcester Public Schools, Worcester, Massachusetts ACCOUNTABILITY OBJECTIVE: As the second-largest school district in Massachusetts, the Worcester Public Schools (WPS) operates a robust, multi-site enterprise network that serves approximately 25,000 students and over 4,000 staff members. The district's digital infrastructure spans across 55 locations and encompasses a vast fleet of end-user hardware-including over 25,000 Chromebooks, 6,000 iPads, and 1,500 desktop computers-supported by more than 75 on-premise and cloud-hosted servers, cloud-hosted email services, and core student and employee information systems. To safeguard this expansive ecosystem, WPS is seeking a fully competent and productive IT Cyber Security Administrator. The successful candidate will apply required job skills, policies, and procedures to manage and protect our organization's security systems, networks, and data. This role involves completing substantive assignments, projects, and tasks of moderate scope and complexity to ensure that the district's defenses remain up to date and resilient against vulnerabilities and cyber attacks. The Cybersecurity Administrator will exhibit: Autonomy & Judgment: Works independently under general supervision; exercises sound judgment within defined guidelines and practices to determine appropriate actions and mitigate security risks. Network & Systems Safeguarding: Actively manages, monitors, and maintains the security integrity of the district's 55-site network, data systems, and tens of thousands of endpoint devices. Collaboration &; Leadership: May provide professional guidance, technical insights, and assistance to entry-level IT professionals and/or technical support staff. PRINCIPAL RESPONSIBILITIES: Security policy: Create and enforce security policies and procedures. Security monitoring: Daily monitoring of the district's cyber security infrastructure and toolsets. Security audits: Conduct regular security audits and vulnerability assessments. Security incidents: Respond to security incidents and unauthorized activities. Security technologies: Configure and maintain security technologies like firewalls, antivirus, and intrusion detection systems. Security training: Create training content on security protocols. Coordinate with the training team for implementation. Security documentation: Maintain security documentation such as SOPs and internal process documents. Security compliance: Ensure that security controls, procedures, and designs meet established standards. Coordinate with Network and Server administrators to ensure best practices for user authentication, authorization, and role-based access control. Prepare risk reports and present findings to senior management. Stay current on security threats, vulnerabilities, and technologies. Collaborate with administration, support staff, and IT support personnel and professionals. Promote team building and a positive work environment Other duties as assigned. MINIMUM QUALIFICATIONS: Bachelor's degree in computer science/cyber security (or related) or 5 years of related IT experience. Demonstrated organizational and communication skills (both oral and written). Demonstrated interpersonal skills and the ability to effectively communicate with a wide range of individuals and constituencies in a diverse community. Understanding and background with Intrusion Detection Systems and SIEM products. Background in Incident Response. Understands general firewall configuration and sequential rule lists. Knowledge and understanding of OSI model. Ability to present and explain complex technical topics, problems, alternative solutions to others. Experience in interpreting vulnerability assessments. Experience conducting or coordinating vulnerability scans, and penetration tests on campus systems, document findings, and recommend risk mitigation strategies. Experience working with other technical support staff in identifying and implementing appropriate security safeguards, including patch application and anti-malware strategies. Experience analyzing network traffic, intrusion attempts, activity logs, and system alerts for trends, anomalies, and potential security breaches. Knowledge of Active Directory and how security rules are applied using GPOs, OUs and/or Security Groups Ability to multitask and prioritize multiple projects in a fast-paced environment Ability to lift 50lbs. Valid driver's license and reliable transportation to travel between district locations. Ability to work collaboratively with all levels of staff. PREFERRED QUALIFICATIONS: Demonstrated ability to develop scripts, tools, and procedures to automate scans, assessments, and other monitoring and discovery activities. Current CompTIA Security+, CISSP, CISM, CEH, OSCP or CCSP certifications. Experience working in a municipal or K-12 environment. POSITION TYPE/WORK YEAR/SALARY: This is a full-year, represented position in LIUNA LOCAL UNION 176/UNIT D which determines the salary scale. The typical workday is 8:30 a.m. - 4:30 p.m., with additional hours required to fulfill position responsibilities.