Director of IT – Information Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Direct and oversee the company's IT operations, including the management and growth of IT personnel.

• Manage end-user support, device management, Microsoft 365 administration, cloud infrastructure, networking, and technology operations.

• Create and uphold IT policies, standards, procedures, and operational documentation.

• Cultivate relationships with technology vendors, consultants, and service providers.

• Formulate and sustain IT budgets, roadmaps, and initiatives for technological improvement.

• Ensure systems are dependable, secure, and aligned with corporate objectives.

• Take ownership of the company's information security program.

• Develop and maintain security policies, standards, and related procedures.

• Conduct risk assessments to guarantee the implementation and maintenance of appropriate controls.

• Lead initiatives for cybersecurity awareness and training.

• Supervise security monitoring, incident response planning, and vulnerability management activities.

• Collaborate with leadership to identify and mitigate technology and cybersecurity risks.

• Coordinate information security and compliance initiatives.

• Act as the primary internal contact for security assessments and audits.

• Maintain evidence repositories, control documentation, risk registers, and plans of action.

• Engage with external auditors, consultants, customers, and regulatory stakeholders as required.

• Convert security and compliance requirements into sustainable business processes and technical controls.

• Establish accountability and ownership for IT and security controls throughout the organization.

• Create reporting and metrics for leadership concerning technology, cybersecurity, and compliance initiatives.

• Develop scalable processes that minimize risk while facilitating company growth.

• Propel continuous improvement of IT operations and information security practices.

• Within the first year, establish clear ownership and accountability, enhance audit readiness and compliance maturity, strengthen governance and security processes, increase visibility into risks and IT performance, and build a scalable IT and security program.

⛳️ Requirements

• Master's degree in Information Technology, Cybersecurity, Information Systems, or a related field, or equivalent experience.

• Over 5 years of progressive experience in IT, cybersecurity, information security, or related areas.

• More than 3 years of leadership or people management experience.

• Experience in leading or supporting cybersecurity, compliance, risk management, or audit programs.

• Familiarity with recognized security frameworks or assessment programs, such as CMMC, IL4 and 5, NIST 800-171, SOC 2, ISO 27001, or FedRAMP.

• Practical experience with Microsoft 365, Azure, endpoint management, identity and access management, DevSecOps, and security technologies.

• Strong grasp of security governance, risk management, and compliance principles.

• Experience supporting government contractors or highly regulated organizations.

• Experience with Microsoft GCC High environments.

• Knowledge of Microsoft Defender, Intune, Conditional Access, and modern security tools.

• Experience in developing policies, standards, procedures, and control documentation.

• Professional certifications such as CISSP, CISM, CRISC, Security+, Azure Administrator, or equivalent.

• Hands-on experience with PowerShell, Terraform, and coding for IaaS cloud platforms.

• US citizenship is required.

🏝️ Benefits

• Equal Opportunity Employer dedicated to diversity and inclusion.

• Drug-free workplace.