Director of Cybersecurity Programs & Sector Engagement

Who We Are

NGO-ISAC is a 501(c)(3) nonprofit that strengthens the security of U.S.-based nonprofits. We are the leading cybersecurity community for non-governmental organizations, serving 400+ members including think tanks, human rights organizations, foundations, environmental groups, and healthcare nonprofits and partnering with private sector organizations both large and small. We're the cybersecurity backbone keeping civil society functioning in an increasingly digital world.

Our mission: Boost cybersecurity maturity in NGOs through strategic intelligence, best practices, and immersive education, fostering a resilient and collaborative security culture.
Who You Are

NGO-ISAC is hiring a leader to build and run its cybersecurity programs and sector engagement work. Much of this function is still being built, and the person in this role will design it. They will set the direction for threat intelligence sharing and collective defense, create the programs and resources that raise members' security maturity, and represent NGO-ISAC across government, industry, and the wider cybersecurity community. The stakes are direct: when a nonprofit or a newsroom is compromised, people can be surveilled or detained. This role builds the programs that help members prevent and recover from those attacks.

This is a senior role with real ownership and the authority to act on it, accountable to NGO-ISAC's budget, strategy, and shared leadership. It suits a confident expert who collaborates well, respects what others know, and stays open to feedback.

This role is fully remote within the United States. We prefer candidates on the East Coast for time-zone overlap and the occasional in-person event; travel required.

This role owns what NGO-ISAC produces: curriculum, intelligence products, technical content, and its accuracy. Membership owns the member transaction: who joins, who renews, what they pay, and what the record says. Community & Partnerships owns the member relationship: engagement, convening, and peer community. It also owns partnerships, from peer organizations through commercial and technology partners; this role assesses the technical fit of technology partners. All three functions serve the same organizations through different work.
What You'll Do
Cybersecurity programs and member support

- Develop security initiatives suited to how nonprofits actually work and what they can resource.

- Design programs that scale, such as security assessments, resilience guidance, and training.

- Develop and deliver member training, such as phishing simulations, incident-response drills for non-technical staff, and executive security briefings.

- Spot emerging threats to civil society and get ahead of them.

- Produce practical tools and resources that raise security maturity across the sector.

- Make sure programs deliver measurable value to members.

- Work with Community & Partnerships, the member-facing liaison for programming, on member needs, program feedback, and the framing and accessibility of content, with this role deciding what is published.

Threat intelligence and collective defense

- Run the collection, analysis, and sharing of threat intelligence relevant to nonprofits.

- Coordinate intelligence sharing among members.

- Grow and manage the intelligence-sharing platform and its governance, coordinating with Community & Partnerships, which owns broader community engagement channels.

- Govern intelligence sharing under Traffic Light Protocol, protecting member identity.

- Issue alerts and guidance on emerging threats.

- Support members during incidents that affect the sector.

- Maintain relationships with other ISACs and information-sharing networks.

Sector leadership and strategic engagement

- Build relationships with CISA, the National Council of ISACs, and peer ISACs.

- Assess the technical fit of technology and commercial partners, supporting the partnership program owned by Community & Partnerships.

- Ta