Executive Director of Cybersecurity and Privacy

Office of Technology; Charlotte (NC); On-site; USD 140,000 - 190,000; Full time

Job summary

Charlotte-Mecklenburg Schools seeks an Executive Director of Cybersecurity and Privacy to lead the district's security program and data privacy operations. You will develop, implement, and monitor security policies, oversee IAM, incident response, and risk assessments to protect district information assets.

The role requires senior leadership, governance of budgets, and alignment with standards (e.g., NIST CSF) while ensuring compliance with laws and district policies.

Qualifications

• Extensive knowledge of cybersecurity principles, frameworks, and policy development.
• Experience overseeing IAM, incident response, and privacy reviews.
• Ability to lead strategy, risk analysis, and audits aligned with laws and standards.

Responsibilities

• Lead and supervise cybersecurity programs and staff.
• Develop and maintain district-wide cybersecurity policies and procedures.
• Oversee incident response planning, detection, containment, and reporting.
• Manage identity and access management security across platforms.
• Coordinate privacy reviews to ensure student data protection.
• Oversee audits, vulnerability assessments, and remediation tracking.
• Collaborate on budget planning for cybersecurity and privacy initiatives.
• Ensure compliance with applicable laws, regulations, and standards.

Skills

Cybersecurity policies

Identity and access management

Incident response

Threat analysis

Security auditing

Policy development

Regulatory compliance

Risk management

Executive leadership

Tools

SIEM/SOAR

Endpoint security

Job description

Executive Director of Cybersecurity and Privacy

Charlotte-Mecklenburg Schools - Charlotte, North Carolina Open in Google Maps

Job Details

Job ID: 5940061

Application Deadline: Oct 26, 2026 4:59 AM (UTC)

Posted: Sep 25, 2026 12:00 AM (UTC)

Starting Date: Immediately

Job Description

General Definition of Work

The executive director of cybersecurity and privacy, under minimal supervision, performs senior-level work with extensive decision-making discretion applying advanced subject matter knowledge and operational oversight of the district's cybersecurity program and data privacy operations. Position develops, implements, and monitors security policies, procedures and controls; and ensures compliance with applicable laws, regulations, and industry standards. Oversees identity and access management, incident response, cybersecurity technologies, risk assessments, audits, and data privacy reviews to protect district information assets and systems. Employee performs advanced and supervisory work to carry out the Board of Education policies and procedures under the direction of the Cybersecurity Officer.

Qualifications

To perform this job successfully, an individual must be able to perform each essential function satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Salary/Status

Pay Grade 11/Full-time, 12 months

Reports To

Cybersecurity Officer

Place of Work

The normal place of work is on the premises used by Charlotte-Mecklenburg Schools. Charlotte- Mecklenburg Schools reserves the right to require you to work at such other place(s) as it may reasonably require from time to time.

Essential Functions

• Adhere to all state, federal, and local laws, policies, and procedures
• Adhere to all state, federal, and local laws, policies, and procedures
• Lead, manage, supervise, and evaluate assigned programs/staff in the district
• Collaborate on and support cybersecurity strategic planning, policy development, incident response planning, and threat and risk analysis
• Oversee identity and access management security across the district's identity platforms, including security monitoring and incident response, conditional access and privileged access controls, risk-based authentication, and account and session security
• Conduct vendor data-privacy reviews and ed-tech application vetting to ensure compliance with student data privacy laws and district privacy standards
• Investigate, analyze, and formulate methods for handling special projects and reports
• Partner with the Cybersecurity Officer to develop and maintain district-wide cybersecurity policies, standards, and procedures aligned with Board policy and industry frameworks (e.g., NIST CSF)
• Direct day-to-day execution of the district's cybersecurity incident response plans and playbooks, including investigation, containment, remediation, and reporting
• Oversee the day-to-day evaluation, piloting, and implementation of cybersecurity products and technologies (e.g., SIEM/SOAR, endpoint detection and response) identified through strategic planning
• Oversee required cybersecurity audits, vulnerability assessments, and compliance reviews, including security control documentation and remediation tracking
• Coordinate with other departments on disaster and contingency emergency management planning
• Ensure adherence to security, privacy, and intellectual property laws across the cybersecurity program
• Participate in the development and administration of the department budget
• Oversee creation and maintenance of standard operating procedures, best practices, and playbooks across cybersecurity and privacy functions
• Facilitate/participate in professional development and related meetings
• Complete local, state, or federal surveys and reports accurately and promptly, including cybersecurity compliance reporting
• Create an inclusive environment with positive communication/public relations
• Perform related work as assigned or required

Knowledge, Skills, Abilities

• Comprehensive in-depth knowledge of cybersecurity principles, frameworks, threats, and best practices, and their application to incident response, risk management, and policy development
• Comprehensive knowledge of enterprise IT infrastructure and identity and access management security controls sufficient to oversee day-to-day cybersecurity operations
• Comprehensive knowledge of vendor data-privacy review and ed-tech application vetting, including compliance with student data privacy laws
• Skilled in SIEM/SOAR technologies, incident response, and security audit and compliance processes
• Ability to serve as a thought partner and subject matter expert to the Cybersecurity Officer on strategy, policy, and incident response planning, and to translate direction into day-to-day execution for cybersecurity office staff
• Skilled in evaluating, selecting, and implementing cybersecurity and identity security technologies aligned with district goals
• Ability to supervise cybersecurity office staff, manage a departmental budget, and ensure compliance with applicable laws and regulations
• Strong judgment, problem-solving, and decision-making skills; ability to work independently under pressure
• Effective communication and relationship-building skills, with the ability to maintain confidentiality and evaluate program effectiveness

Position Type: Full-time

Job Categories:

Administration > Director/Coordinator/Manager

Administration > Safety/Security

Administration > Technology

Support Staff > Safety/Security

Contact Information

• CMS Staff
• 600 E. Fourth Street
• Fifth Floor
• Charlotte, North Carolina 28202
• Phone: [phone]
• Email: [e-mail]

Map

The content you submit, offer, contribute, attach, post, or display (each a "Submission") will be viewed by other users of the service who may or may not be accurately representing who they are or who they represent. Do not include any sensitive data in your submissions. Any submission or any use or reliance on any content or materials posted via the service or obtained by you through the use of the service is at your own risk. "Sensitive data" for purposes of this section means social security or other government-issued identification numbers, medical or health information, account security information, individual financial account information, credit/debit/gift or other payment card information, account passwords, individual credit and income information or any other sensitive personal data as defined under applicable laws.