Technical Security Manager - Cambium Learning Group

Cambium Learning® Group is an award-winning educational technology solutions leader dedicated to helping all students reach their potential through individualized and differentiated instruction. Using a research-based, personalized approach, Cambium Learning Group delivers SaaS resources and instructional products that engage students and support teachers in fun, positive, safe and scalable environments. These solutions are provided through Learning A-Z® (online differentiated instruction for elementary school reading, writing and science), ExploreLearning® (online interactive math and science simulations, a math fact fluency solution, and a K–2 science solution), Voyager Sopris Learning® (blended solutions that accelerate struggling learners to achieve in literacy and math and professional development for teachers), and VKidz Learning (online comprehensive homeschool education and programs for literacy and science). We believe that every student has unlimited potential, that teachers matter, and that data, instruction, and practice are the keys to success in the classroom and beyond.

Job Overview: The Security Manager will primarily support CAI’s Information Security program by ensuring and maintaining compliance with our current and anticipated commitments to external stakeholders and security frameworks. As our Security Manager, you will have the opportunity to leverage and build upon a mature program that is independently audited against various security standards, benchmarks, and industry best practices. The position is ideal for a well-rounded security professional that can effectively coordinate with established teams responsible for security monitoring, cloud infrastructure, enterprise support, software development, educational testing business processes, and project/customer management.

Job Responsibilities:

• Maintain, mature, and take ownership of our program that ensures conformance to security standards. This includes but is not limited to conformance with ISO 27001, ISO 27018, ISO 42001, Privacy laws, ISO 9001, GovRAMP, FedRAMP, NIST 800, SOC, and CIS Top Controls.
• Facilitate annual independent audits of our organization by third-party security and privacy experts. Create audit plan, co-ordinate with stakeholders, review reports and remediate audit findings.
• Responsible for planning and managing multiple security improvement projects from requirements phase through deployment/implementation.
• Managing document and record control processes and procedures, including maintaining accurate inventories and records of compliance/conformance artifacts
• Responsible for our Security Awareness and related training programs. Maintains and improves processes, platforms and systems that support our training campaigns and content. Creates, monitors and reports on campaigns.
• Supports business development by responding to requests for security and privacy information that