Chief Information Security Officer

We are looking for an experienced Chief Information Security Officer to provide strategic technology and security leadership for a mission-driven nonprofit in Boston, Massachusetts. This Long-term Contract opportunity is ideal for a senior leader who can evaluate current risk exposure, strengthen protection of sensitive donor and client information, and shape a practical roadmap for cybersecurity, data governance, and resilience. The position combines executive-level advisory work with hands-on involvement in infrastructure, disaster recovery planning, and security operations in a Microsoft 365 and Azure-based environment.

Responsibilities:
• Develop a comprehensive security and IT risk strategy aligned with the organization’s mission, operational needs, and compliance expectations.
• Assess the current technology landscape and produce a prioritized roadmap covering cybersecurity improvements, data governance, business continuity, and disaster recovery readiness.
• Lead gap analyses focused on data protection, incident response, network security, backup practices, and overall resilience against breaches or service disruptions.
• Establish and refine policies for information handling, document classification, retention, and archiving to better safeguard confidential legal, community, and donor records.
• Partner with leadership, the internal IT manager, and external service providers to strengthen day-to-day security operations and improve oversight of help desk and technology vendors.
• Provide senior guidance on protecting cloud and on-premises systems, including Microsoft 365, Azure services, shared file environments, servers, and network infrastructure.
• Support planning and execution for critical technology upgrades and security enhancements while minimizing operational risk to the organization.
• Advise on incident preparedness by defining response procedures, escalation paths, and recovery approaches for cyber threats, system outages, and data integrity events.
• Deliver practical recommendations to executive stakeholders on technology priorities, risk posture, and investments needed to support long-term organizational stability.