Student Choice

• Manage and maintain a risk-based, right-sized security program aligned to business priorities • Manage security controls that balance protection, usability, and system performance • Translate risk into clear, actionable decisions for leadership • Working with our vendors, ensure systems are architected with: o Strong identity and access controls o Secure configurations o High availability and resilience • Partner with MSP and IT to build secure, scalable, and fault-tolerant systems • Promote infrastructure consistency and automation • Manage and enhance monitoring, logging, and alerting across all platforms • Define and track key security and reliability metrics, such as: o Incident detection and response times o Vulnerability remediation timelines o System availability and performance • Improve visibility into system behavior to support faster, more effective decision-making • Lead all aspects of incident response, including coordination with MSP, COO, and CIO • Conduct root cause analysis and implement corrective actions • Drive a culture of continuous improvement, reducing repeat incidents over time • Ensure systems and processes evolve based on lessons learned • Manage the MSP relationship, ensuring accountability and performance • Oversee: o Security monitoring o Alert triage and response o Vulnerability management o Desk top maintenance and issue resolution • Define SLAs and ensure operational effectiveness • Working with internal and external resources, lead SSAE 18 / SOC audits, including preparation and remediation coordination. • Maintain existing policies, standards, and documentation aligned to actual risk • Create new policies as identified • Co-Own business continuity and disaster recovery programs across the organization • Participate in testing and improvement recommendations • Assess and monitor third-party security posture • Integrate vendor risk into broader risk management practices • Work with and manage other vendor partners to ensure best security practices and successful audits. • Promote a practical, accountable security culture • Deliver targeted training and awareness programs to staff • Stay current on threats and evolving best practices