Technology Support & Security Manager

***** PLEASE BE SURE TO APPLY THROUGH OUR WEBSITE *****

At RISE Partnership, we partner with unions, responsible employers, and public agencies to support caregivers and public service workers. We give workers the resources they need to make the most of their union-negotiated training and benefits.

Our work is grounded in our core values: respect, integrity, service, and equity. These values guide how we deliver workforce solutions, like training, benefits navigation, job matching, and career development. We address the unique challenges Oregon workers face to ensure all workers have access to services and support that help them grow, thrive, and feel confident in their work and communities.

The Technology Support & Security Manager reports to the Technology & Applications Manager and operates within the Information Systems department and Shared Services model to deliver secure, responsive, and high-quality support to RISE staff.

This role leads IS security operations and is accountable for Microsoft 365 security, SaaS application security, and overall system security. Responsibilities include security architecture, configuration, monitoring, and risk mitigation—not just administration—while tracking and reporting on security posture, incidents, and improvements.

The position supervises frontline support staff for the help desk, ensures reliable and secure service delivery. This includes ownership of helpdesk processes, help desk success metrics, and maintaining hands-on involvement through escalation support and backup helpdesk coverage. It also supports efficient resource use, fosters cross-department collaboration, and enables staff to focus on high-impact program delivery.

• Owns Microsoft 365 security architecture, including Entra , Conditional Access, MFA, DLP, Defender, and compliance configurations, ensuring alignment with established security policies and standards
• Develops, implements, and enforces security policies, standards, and best practices aligned with organizational risk tolerance, compliance requirements, and evolving threats
• Partners with stakeholders to operationalize security policies through system configuration, access governance, and standardized processes across applications
• Drives policy adoption through structured rollout plans, including communication, training, and system-level enforcement mechanisms
• Continuously monitors security posture, alerts, and vulnerabilities; ensures policy compliance through proactive monitoring and leads incident response and remediation activities
• Conducts risk assessments to identify gaps between policy and practice and drives continuous improvement of both policy frameworks and technical controls.
• Owns identity and access management policies and their implementation, including account provisioning, deprovisioning, licensing, permissions, and role-based access models
• Leads the implementation of data governance policies, including retention, archiving, classification, and access controls, ensuring compliance through system configuration and monitoring
• Establishes repeatable processes and templates for policy creation, approval, implementation, and ongoing review
• Leads the development, documentation, and lifecycle management of security policies governing Microsoft 365 and SaaS platforms, translating organizational requirements into enforceable technical controls
• Ensures access controls are consistently applied and enforced across systems in accordance with policy and least-privilege principles
• Implements and maintains Microsoft 365 security controls (MFA, Conditional Access, secure sharing, email protection) as direct enforcement of organizational security policies
• Leads SaaS security across platforms (Salesforce, Jot Form, Asana, etc.), establishing and implementing policies for secure configuration, integrations, and role-based access control
• Regularly reviews and updates configurations to maintain alignment with policy changes, security best practices, and emerging risks
• Monitors security alerts, investigates suspicious activity, and executes incident response in…