Position Overview
The Director of Information Technology and Security leads the strategic and operational management of the organization’s IT infrastructure, cybersecurity posture, and technology governance. This role is responsible for developing and executing IT initiatives aligned with business goals, safeguarding digital assets, and managing technology procurement processes including RFPs (Requests for Proposals).
Key Responsibilities
- Develop and implement the organization’s IT strategy and annual technology roadmap.
- Direct the design, implementation, and maintenance of enterprise-wide systems, networks, and applications.
- Serve as the primary authority on data protection, incident response, and risk mitigation.
- Oversee the development, review, and management of RFPs for IT and security services, hardware, and vendor engagements.
- Evaluate and negotiate technology vendor contracts, ensuring alignment with budget and operational priorities.
- Supervise IT operations, service desk, and system administration teams, fostering continuous improvement and innovation.
- Partner cross-functionally with Finance, Operations, and Compliance to optimize technology investments and governance.
- Monitor and report on IT performance metrics, project milestones, and risk indicators to senior leadership.
- Stay current on emerging technologies, regulatory changes, and industry best practices to guide proactive planning.
Qualifications
- Bachelor’s degree in Information Technology, Computer Science, or a related field (Master’s preferred).
- 10+ years of progressive IT leadership experience with at least 5 years in a senior management or director role.
- Proven expertise in information security management, governance frameworks, and incident response planning.
- Strong experience managing full-cycle RFP processes—from requirements definition to selection and negotiation.
- Demonstrated success leading enterprise IT initiatives and managing hybrid or cloud-based infrastructures.
- Familiarity with compliance standards such as GDPR, HIPAA, NIST, or ISO 27001.
- Excellent leadership, communication, and stakeholder management skills.
- Professional certifications such as CISSP, CISM, PMP, or ITIL are advantageous.
Core Competencies
- Strategic and analytical mindset
- Strong vendor and contract management
- Risk management and compliance acumen
- Operational excellence and technical proficiency
- Collaborative leadership style