Vice President – Information Security and Infrastructure

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee ACE’s enterprise cybersecurity, technology risk, infrastructure, and operational resilience initiatives.

• Report directly to the Chief Information Officer, providing counsel to executive leadership and Board committees.

• Develop and implement long-term strategies for cybersecurity, infrastructure, cloud services, identity management, and resilience.

• Act as the senior executive authority responsible for enterprise cybersecurity risk.

• Manage the cybersecurity program, including the roadmap, governance framework, policies, standards, risk register, and remediation portfolio.

• Define security requirements for identity management, data protection, encryption, vulnerability management, monitoring, incident response, third-party risk, cloud security, secure development, business continuity, disaster recovery, AI, and records retention.

• Lead security operations, threat monitoring, vulnerability management, identity protection, endpoint and cloud security, incident response, digital forensics coordination, and managed security services.

• Serve as the executive incident commander during significant cybersecurity incidents.

• Direct the infrastructure and cloud strategy encompassing Microsoft 365, Azure, Entra ID, networks, endpoints, collaboration platforms, backup, recovery, monitoring, and end-user technology.

• Establish security architecture and security-by-design standards for technology acquisitions, contracts, implementations, applications, integrations, cloud services, and AI solutions.

• Define requirements for AI risk-tiering, authorization, data protection, audit, monitoring, data loss prevention, and exceptions.

• Own enterprise technology resilience, including business continuity, disaster recovery, cyber recovery, crisis management, availability, identity recovery, vendor continuity, and recovery testing.

• Ensure adherence to higher education, privacy, contractual, payment card, and cyber insurance obligations.

• Sponsor security assessments, penetration tests, audits, maturity reviews, and executive exercises; oversee remediation responses and documentation.

• Manage infrastructure and security vendors, including contracts, service levels, performance, continuity, and risk management.

• Develop operating and capital budgets, workforce plans, sourcing strategies, and investment business cases.

• Report on performance metrics related to risk, controls, availability, remediation, incident response, recovery, third-party risk, vendors, employee experience, and maturity.

• Recruit, lead, mentor, and retain teams focused on infrastructure and security.

• Stay current with cyber threats, regulations, cloud and infrastructure practices, and emerging technologies.

⛳️ Requirements

• A Bachelor’s degree in information technology, cybersecurity, computer science, business, or a related field, or an equivalent combination of education and relevant executive experience.

• Over 15 years of progressive leadership experience in technology and cybersecurity.

• At least 7 years of experience in leading enterprise infrastructure, cybersecurity, risk, or resilience functions.

• Responsibility for managing teams, senior technical professionals, and strategic service providers.

• Background as a Vice President, Deputy Chief Information Security Officer, senior security executive, or a comparable technology executive role.

• Proven experience in developing and implementing multi-year cybersecurity and infrastructure strategies, roadmaps, policies, standards, governance models, and investment plans.

• Extensive working knowledge of the NIST Cybersecurity Framework 2.0 or similar security and control methodologies.

• Familiarity with enterprise security policies, control frameworks, risk acceptance, exception governance, regulatory assurance, audit remediation, and executive or Board-level risk reporting.

• Experience in directing responses to significant cybersecurity incidents or leading enterprise crisis exercises.

• Strong experience with Microsoft 365, Azure, Entra ID, Defender, Purview, Sentinel, Intune, networking, backup and recovery, monitoring, identity and access management, and service management, or similar enterprise platforms.

• Leadership experience in security operations, vulnerability management, data protection, third-party risk, security architecture, business continuity, disaster recovery, cyber recovery, and security awareness initiatives.

• Knowledge of applying FERPA, the GLBA Safeguards Rule, PCI DSS, privacy obligations, cyber insurance requirements, and breach-response protocols.

• Exceptional executive communication, financial acumen, commercial insights, budget management, business-case development, contract negotiation, vendor governance, service-level management, workforce planning, and technology cost optimization abilities.

• Capacity to drive organizational change, establish accountability, nurture talent, and operate within a distributed, virtual-first organization.

• CISSP or CISM certification is mandatory.

• CRISC, CCSP, CGEIT, ITIL 4, or relevant Microsoft cloud and security certifications are preferred.

• Must be self-driven, collaborative, detail-oriented, adaptable, and capable of working under pressure to meet tight deadlines.

• Must align with and support the College’s Impact mission.

🏝️ Benefits

• Eligibility for annual bonuses for full-time employees.

• Comprehensive medical, dental, and vision insurance.

• Options for Health Savings Account (HSA) and Flexible Spending Account (FSA).

• Paid parental leave.

• Paid time off for volunteering.

• Tuition reimbursement and reduction programs.

• Generous paid time off (PTO).

• 401k plan with employer matching.

• Comprehensive wellness and Employee Assistance Program (EAP).

• Recognition and awards programs for employees.

• Employer-funded life and accidental death & dismemberment insurance.

• Short-term disability coverage.

• Employer-covered long-term disability insurance.

• Virtual-first work environment.

• Inclusive workplace culture.

• Support for remote work internet service requirements and flexibility.

• AI-enabled workplace tools and productivity support.