VP of Information Systems & Security

Overwatch is a service-disabled Veteran-owned small business (SDVOB) certified through the National Veterans Business Development Council (NVBDC), delivering construction professional services, talent acquisition, and general contractor solutions within the mission-critical infrastructure industry. Our focus is the construction and management of state-of-the-art data centers, executed with the precision and reliability this industry demands. From high-end engineers to seasoned field professionals, we deploy the talent needed to bring complex infrastructure to life.

At Overwatch, it's more than a job — it's purpose.

Overwatch Mission Critical is looking for a Vice President of Information Systems & Security to strengthen how we protect, govern, and operate our enterprise technology environment.

This is a security-first technology leadership role with an immediate focus on cybersecurity, data privacy, governance, risk, and compliance.

As Overwatch continues to scale across a distributed, field-based workforce in the United States and Europe, we need a technology environment that is secure, resilient, well governed, and capable of scaling with the business. This role will build the security and privacy foundation while helping establish the operating standards and discipline required across enterprise technology.

The VP will work across Technology, Business Platforms & Intelligence, Legal, HR, Finance, and business leadership to translate risk and business requirements into practical controls, operating standards, and technology priorities.

This role reports to the SVP, Technology and will serve as a senior technology partner to the executive team.

The immediate mandate is building a practical, scalable security program that protects the enterprise without slowing the business.

You will:

• Own the enterprise cybersecurity strategy, roadmap, architecture, and security operating model
• Establish identity as a primary security control plane across single sign-on, conditional access, privileged access, joiner-mover-leaver processes, and access recertification
• Drive endpoint security, vulnerability management, encryption, detection, response, and security monitoring across a distributed environment
• Own incident response planning, exercises, escalation, and executive communication during material security events
• Build security awareness and role-based training focused on measurable behavior and risk reduction
• Partner with technology and business leaders to embed security into systems, integrations, infrastructure, and enterprise AI use cases

This leader will establish a durable control and risk environment that can support client requirements, growth, and increasing enterprise complexity.

You will:

• Own the technology policy framework, risk register, control environment, testing calendar, exceptions, remediation, and executive reporting
• Lead SOC 2 Type I and Type II readiness and examinations end to end, including scope, control design, evidence, examiner management, findings, and remediation
• Maintain alignment to applicable frameworks such as NIST CSF, ISO 27001, NIST SP 800-171, or CMMC as business and client requirements evolve
• Build a tiered third-party technology and security risk program and hold managed service providers and vendors accountable for control performance
• Translate client contracts, insurance requirements, and applicable obligations into practical technology controls and ownership
• Provide clear executive-level reporting on technology risk, investment trade-offs, control effectiveness, and remediation priorities

Security and privacy must extend to how…