Description
Montgomery County Community College invites applications for the Senior Director of IT Security position. The Senior Director of IT Security serves as the College’s Information Security Officer (ISO) and is the College’s lead for cybersecurity strategy, governance, and risk management. This is a role for someone who likes complexity, who can see the big picture, and who is willing to dive into the details when the moment calls for it. The Senior Director sets the direction for a secure and resilient technology environment, leads the development and execution of the College’s IT Security Program, and works closely with senior leaders to align security priorities with academic and administrative needs. The Senior Director reports to the Chief Information Officer and plays a central role in strengthening the College’s overall security posture and shaping a campus culture that values awareness, responsibility and shared stewardship.
The position is responsible for building and evolving the College’s security strategy in a way that matches the institution’s mission and operational realities The Senior Director leads a small but dedicated security team of two full-time employees, providing mentorship, structure and day-to-day guidance. The role balances strategic planning with hands on technical work and requires someone who is comfortable guiding staff while also stepping in to solve complex challenges directly. The Senior Director advises institutional leadership on emerging threats, recommends appropriate responses, and drives projects and initiatives that reduce risk to the College. The successful candidate brings sound judgment, technical depth, and the ability to translate security needs into clear and actionable decisions for the institution.
Essential Knowledge and Skills
1. Education/Training/Work Experience:
-Bachelor’s degree in information technology or related field required. Master’s Degree preferred.
-8 years of progressive information technology and/or cybersecurity experience with at least 5 years of supervisory experience.
-Experience building, leading, or maturing an institutional security program is preferred.
-CISSP, CRISC, CISM, CISA or equivalent senior level cybersecurity certification is preferred.
-Hands on experience in security infrastructure systems.
-Experience managing partnerships with 3rd party vendors.
-Ability to communicate security priorities and risk impacts to technical and non-technical audiences.
-Experience in mentoring and developing staff members.
-Strong understanding of NIST CSF, risk management practices, and regulatory frameworks relevant to higher education (e.g., FERPA, HIPAA, GLBA, and PCI-DSS).
2. Specialized Knowledge & Skills:
-Advanced understanding of technical and business process controls that ensure the confidentiality, integrity and availability of technology and data.
-Execution of risk assessments, security audits, business continuity, vulnerability, and penetration testing.
-Ability to work autonomously and make quick and effective decisions.
-Implementation of IT security best practices.
-Strong interpersonal skills and the ability to effectively communicate with a wide range of individuals and constituencies in a diverse community.
-Maintains availability during off hours, as needed, to provide leadership and decision-making during cybersecurity incidents or other critical events.
Since 1964, Montgomery County Community College has been transforming the lives and communities to meet the evolving educational, workforce and cultural needs of Montgomery County at its Blue Bell and Pottstown campuses and online. MCCC’s comprehensive curriculum includes more than 100 associate degree and certificate programs as well as customized workforce training programs. As an Achieving the Dream Leah Meyer Austin Alumni Award recipient, MCCC is focused on removing barriers to access and improving student learning outcomes and completion. For the ninth year, MCCC has been named one of the Most Promising Places to Work in Community Colleges in the nation by the National Institute for Staff and Organizational Development for its commitment to diversity. For more information, visit mc3.edu.
Apply online: For the complete job description and to apply for this position, please visit https://www.mc3.edu/employment-opportunities This position will close on March 01, 2026.
Requirements
Essential Knowledge and Skills
1. Education/Training/Work Experience:
-Bachelor’s degree in information technology or related field required. Master’s Degree preferred.
-8 years of progressive information technology and/or cybersecurity experience with at least 5 years of supervisory experience.
-Experience building, leading, or maturing an institutional security program is preferred.
-CISSP, CRISC, CISM, CISA or equivalent senior level cybersecurity certification is preferred.
-Hands on experience in security infrastructure systems.
-Experience managing partnerships with 3rd party vendors.
-Ability to communicate security priorities and risk impacts to technical and non-technical audiences.
-Experience in mentoring and developing staff members.
-Strong understanding of NIST CSF, risk management practices, and regulatory frameworks relevant to higher education (e.g., FERPA, HIPAA, GLBA, and PCI-DSS).
2. Specialized Knowledge & Skills:
-Advanced understanding of technical and business process controls that ensure the confidentiality, integrity and availability of technology and data.
-Execution of risk assessments, security audits, business continuity, vulnerability, and penetration testing.
-Ability to work autonomously and make quick and effective decisions.
-Implementation of IT security best practices.
-Strong interpersonal skills and the ability to effectively communicate with a wide range of individuals and constituencies in a diverse community.
-Maintains availability during off hours, as needed, to provide leadership and decision-making during cybersecurity incidents or other critical events.
