Director of Cybersecurity Programs & Sector Engagement

Who We Are NGO-ISAC is a 501(c)(3) nonprofit that strengthens the security of U.S.-based nonprofits. We are the leading cybersecurity community for non-governmental organizations, serving 400+ members including think tanks, human rights organizations, foundations, environmental groups, and healthcare nonprofits and partnering with private sector organizations both large and small. We're the cybersecurity backbone keeping civil society functioning in an increasingly digital world. Our mission: Boost cybersecurity maturity in NGOs through strategic intelligence, best practices, and immersive education, fostering a resilient and collaborative security culture. Who You Are NGO-ISAC is hiring a leader to build and run its cybersecurity programs and sector engagement work. Much of this function is still being built, and the person in this role will design it. They will set the direction for threat intelligence sharing and collective defense, create the programs and resources that raise members' security maturity, and represent NGO-ISAC across government, industry, and the wider cybersecurity community. The stakes are direct: when a nonprofit or a newsroom is compromised, people can be surveilled or detained. This role builds the programs that help members prevent and recover from those attacks. This is a senior role with real ownership and the authority to act on it, accountable to NGO-ISAC's budget, strategy, and shared leadership. It suits a confident expert who collaborates well, respects what others know, and stays open to feedback. This role is fully remote within the United States. We prefer candidates on the East Coast for time-zone overlap and the occasional in-person event; travel required. This role owns what NGO-ISAC produces: curriculum, intelligence products, technical content, and its accuracy. Membership owns the member transaction: who joins, who renews, what they pay, and what the record says. Community & Partnerships owns the member relationship: engagement, convening, and peer community. It also owns partnerships, from peer organizations through commercial and technology partners; this role assesses the technical fit of technology partners. All three functions serve the same organizations through different work. What You'll Do Cybersecurity programs and member support Develop security initiatives suited to how nonprofits actually work and what they can resource. Design programs that scale, such as security assessments, resilience guidance, and training. Develop and deliver member training, such as phishing simulations, incident-response drills for non-technical staff, and executive security briefings. Spot emerging threats to civil society and get ahead of them. Produce practical tools and resources that raise security maturity across the sector. Make sure programs deliver measurable value to members. Work with Community & Partnerships, the member-facing liaison for programming, on member needs, program feedback, and the framing and accessibility of content, with this role deciding what is published. Threat intelligence and collective defense Run the collection, analysis, and sharing of threat intelligence relevant to nonprofits. Coordinate intelligence sharing among members. Grow and manage the intelligence-sharing platform and its governance, coordinating with Community & Partnerships, which owns broader community engagement channels. Govern intelligence sharing under Traffic Light Protocol, protecting member identity. Issue alerts and guidance on emerging threats. Support members during incidents that affect the sector. Maintain relationships with other ISACs and information-sharing networks. Sector leadership and strategic engagement Build relationships with CISA, the National Council of ISACs, and peer ISACs. Assess the technical fit of technology and commercial partners, supporting the partnership program owned by Community & Partnerships. Take part in working groups and joint initiatives. Represent NGO-ISAC at conferences, forums, and sector convenings. Contribute thought leadership on the threats facing civil society. Development and funding support (In partnership with the COO) Translate program impact into propositions that funders can support. Contribute to grant proposals and funder conversations. Build relationships with partners whose interests align with the sector's security. Team leadership Manage and mentor program staff. Set clear priorities and objectives. Deliver programs and services reliably. Coordinate across the organization to support the work. What You Bring Required 8 or more years in cybersecurity, threat intelligence, or information security. Experience in collaborative security settings such as ISACs, government partnerships, nonprofits, or multi-organization efforts. A record of turning security expertise into working programs or services. Strong grasp of the current threat environment. Experience coordinating security work across multiple organizations. Clear communication with both technical and non-technical audiences. Experience leading teams or programs. Preferred Experience with nonprofits, humanitarian organizations, or civil society groups. Familiarity with frameworks such as NIST CSF, CIS Controls, or ISO 27001. Familiarity with Traffic Light Protocol, MITRE ATT&CK, or open-source intelligence. Certifications such as CISSP, GCTI, or CEH. A degree in information technology, cybersecurity, management, or a related field. Experience with threat intelligence or information-sharing programs. NGO-ISAC encourages candidates to apply even if they do not meet every qualification listed. What We Offer We want our people well and steady while they do work that matters, so the benefits are built to back that up. You get medical, dental, and vision insurance, with FSA options to stretch what you spend on care. Paid time off is unlimited, and we want you to use it. We contribute to a 403(b) for your retirement and fund professional development so y