Manager, Cybersecurity and Infrastructure

Manager, Cybersecurity and Infrastructure

• Full-time
• Department:
  Technology and Information Management
• Exempt Status: exempt
• Compensation: USD 105000 - USD 115000 - yearly

Oxfam is a global organization that fights inequality to end poverty and injustice. We offer lifesaving support in times of crisis and advocate for economic justice, gender equality, and climate action. We demand equal rights and equal treatment so that everyone can thrive, not just survive.

Oxfam International (OI) Info Sec Team, Affiliates Infrastructure Teams, Local and International Business Units and Staff, Business Applications Manage, Vendors and Consultants.

The Cybersecurity and Infrastructure Manager lead and maintain the stability, security, and scalability of the organization’s IT systems. This role is responsible for day-to-day IT infrastructure operations, coordinate closely with our Managed Security Services Provider (MSSP), respond to security incidents, manage firewall and endpoint protections, and ensure adherence to security policies and procedures. In addition, the role supervises helpdesk operations and office infrastructure including procurement of AV/IT equipment.
This position is essential to maintaining a secure and efficient digital environment and provide support to a hybrid mission-driven workforce across multiple locations.

Cybersecurity and Risk Management (30%)

• Serve as primary liaison with Oxfam’s MSSP to monitor, report on, and resolve cybersecurity threats and vulnerabilities.
• Lead incident response efforts to security in collaboration with Senior Director of TIM, Oxfam America’s CISO as well as OI Info Sec Lead, ensuring proper investigation, documentation, analysis, and remediation.
• Maintain and ensure adherence and compliance of security policies, standards, and practices, including data privacy and acceptable use guidelines.
• Manage security infrastructure, such as firewalls and policies, and VPN access in line with global Oxfam security protocols and applicable regulatory requirements.
• Perform vulnerability scans, pen tests, and appropriate remediations.
• Manage and maintain backup and disaster recovery plans for in-office and cloud infrastructure.
• Responsible for conducting regular security audits and assessments.
• Develop, maintain, and continuously improve IT infrastructure documentation, including network diagrams, system architecture, configuration standards, asset inventories, and operational procedures.

Infrastructure Management (30%)

• Oversee the operation and maintenance of on-premise and cloud-based infrastructure, including network devices, servers, and backups.
• Maintain, administer and manage endpoint protection systems including Microsoft Intune, ensuring secure device provisioning, configuration, compliance, and lifecycle management.
• Manage and support 0365 environment for OUS.
• Oversee the organization's patch management program, ensuring timely deployment of operating system, application, firmware, and security updates across servers, endpoints, and network devices.
• Assess, maintain, and ensure the optimization of AV equipment and conference room technologies for seamless hybrid and in‑person meetings experience, incorporating up‑to‑date tools and best practices.
• Ensure high quality system performance and troubleshoot issues as needed.
• Collaborate with Oxfam’s global IT team on infrastructure initiatives and compliance.
• Ensure high quality system performance and troubleshoot issues as needed.
• Collaborate with Oxfam’s global IT team on infrastructure initiatives and compliance.
• Lead the implementation of upgrades and improvements.

Helpdesk Staff Management and Technical Support (30%)

• Lead the helpdesk team effectively, ensuring timely and efficient technical support for staff as defined by our service level agreements
• Oversee ticket management and provide escalation support as needed.
• Ensure helpdesk staff follow established IT policies and procedures consistently. Implement and optimize end‑user tools, account provisioning, and access controls systems.
• Ensure effective support for hybrid and in‑person meetings, including the AV equipment and…