Technology Support & Security Manager

About RISE Partnership At RISE Partnership, we partner with unions, responsible employers, and public agencies to support caregivers and public service workers. We give workers the resources they need to make the most of their union-negotiated training and benefits.

Our work is grounded in our core values: respect, integrity, service, and equity. These values guide how we deliver workforce solutions, like training, benefits navigation, job matching, and career development. We address the unique challenges Oregon workers face to ensure all workers have access to services and support that help them grow, thrive, and feel confident in their work and communities.

This position is represented by the Communications Workers of America (CWA), Local 7901. We value our collaborative relationship with CWA Local 7901 and respect the important role the union plays in advocating for our workers’ rights and well-being.

About This Role The Technology Support & Security Manager reports to the Technology & Applications Manager and operates within the Information Systems department and Shared Services model to deliver secure, responsive, and high-quality support to RISE staff.

This role leads IS security operations and is accountable for Microsoft 365 security, SaaS application security, and overall system security. Responsibilities include security architecture, configuration, monitoring, and risk mitigation—not just administration—while tracking and reporting on security posture, incidents, and improvements.

The position supervises frontline support staff for the help desk, ensures reliable and secure service delivery. This includes ownership of helpdesk processes, help desk success metrics, and maintaining hands-on involvement through escalation support and backup helpdesk coverage. It also supports efficient resource use, fosters cross-department collaboration, and enables staff to focus on high-impact program delivery.

Essential Functions Enterprise Security Operations:

Owns Microsoft 365 security architecture, including Entra , Conditional Access, MFA, DLP, Defender, and compliance configurations, ensuring alignment with established security policies and standards

Develops, implements, and enforces security policies, standards, and best practices aligned with organizational risk tolerance, compliance requirements, and evolving threats

Partners with stakeholders to operationalize security policies through system configuration, access governance, and standardized processes across applications

Drives policy adoption through structured rollout plans, including communication, training, and system-level enforcement mechanisms

Continuously monitors security posture, alerts, and vulnerabilities; ensures policy compliance through proactive monitoring and leads incident response and remediation activities

Conducts risk assessments to identify gaps between policy and practice and drives continuous improvement of both policy frameworks and technical controls.

Owns identity and access management policies and their implementation, including account provisioning, deprovisioning, licensing, permissions, and role-based access models

Leads the implementation of data governance policies, including retention, archiving, classification, and access controls, ensuring compliance through system configuration and monitoring

Establishes repeatable processes and templates for policy creation, approval, implementation, and ongoing review

Leads the development, documentation, and lifecycle management of security policies governing Microsoft 365 and SaaS platforms, translating organizational requirements into enforceable technical controls

Ensures access controls are consistently applied and enforced across systems in accordance with policy and least-privilege principles

Implements and maintains Microsoft 365 security controls (MFA, Conditional Access, secure sharing, email protection) as direct enforcement of organizational security policies

Leads SaaS security across platforms (Salesforce, Jot Form, Asana, etc.), establishing and implementing policies for secure configuration, integrations, and role-based access control

Regularly reviews and…