Vice President of Information Security & Infrastructure

About The Opportunity

The Vice President of Information Security & Infrastructure is responsible for leading the organization’s enterprise cybersecurity, infrastructure, cloud operations, technical support, end-user computing, IT compliance, procurement, and asset management functions.

This executive leader serves as the organization’s senior authority for:

• Cybersecurity Strategy
• Cyber Risk Management
• Infrastructure Modernization
• Cloud Transformation
• Regulatory Compliance
• Operational Resiliency
• Secure Enterprise Technology Operations

The role combines the responsibilities of a traditional Chief Information Security Officer (CISO) with leadership over enterprise infrastructure and core IT operational services. This position partners closely with executive leadership, legal, operations, HR, finance, and business leaders to ensure technology platforms and cybersecurity capabilities enable business growth, operational excellence, client trust, and federal compliance readiness.

• Lead and mature the enterprise cybersecurity program across all corporate, cloud, and operational environments.
• Develop and execute the organization’s cybersecurity strategy aligned with business objectives, client requirements, and regulatory obligations.
• Serve as the executive leader responsible for cyber risk management, security governance, and enterprise security operations.
• Provide executive and Board-level reporting on cybersecurity posture, risk exposure, incidents, and strategic initiatives.
• Establish and maintain enterprise security policies, standards, procedures, and governance frameworks.
• Lead enterprise incident response, cyber crisis management, and ransomware preparedness programs.
• Oversee security operations including:
  • Threat detection
  • Monitoring
  • Vulnerability management
  • Endpoint security
  • Identity security
  • Third‑party risk management
• Partner with legal, compliance, privacy, and HR teams on cyber governance and investigations.

• Lead enterprise IT compliance initiatives including:
  • CMMC
  • NIST 800‑171
  • CUI governance
  • Related federal security requirements
• Build and operationalize Controlled Unclassified Information (CUI) enclave environments.
• Define enclave segmentation, governance, access controls, and operational standards.
• Lead organizational readiness for CMMC Level 1 compliance initiatives; experience supporting or preparing for CMMC Level 2 strongly preferred.
• Develop and manage:
  • System Security Plans (SSPs)
  • Plans of Action & Milestones (POA&M)
  • Audit evidence
  • Compliance governance processes
• Partner with federal clients, auditors, and external assessors as needed.
• Ensure proper handling, classification, protection, and retention of CUI and sensitive client information.

• Provide executive leadership over enterprise infrastructure operations including:
  • Networking
  • Servers
  • Cloud platforms
  • Storage
  • Identity services
  • Enterprise connectivity
• Lead modernization initiatives including migration from on‑premises infrastructure to cloud‑first and hybrid‑cloud architectures.
• Define and execute enterprise cloud strategies across platforms such as:
• Microsoft Azure
• AWS
• Microsoft 365
• and SaaS ecosystems
• Drive Zero Trust and identity‑centric security architecture strategies.
• Oversee infrastructure resilience, disaster recovery, backup, and business continuity programs.
• Ensure scalable and secure infrastructure operations supporting distributed offices, remote workforce, and field operations.

• Oversee Enterprise Operational Leadership for:
  • IT Infrastructure
  • IT Support / Service Desk
  • End User Computing
  • IT Procurement
  • IT Asset Management
• Lead and mentor IT Directors and operational technology leaders.
• Establish operational KPIs and service management standards.
• Improve IT service delivery and user experience across the enterprise.
• Manage enterprise hardware/software lifecycle governance.
• Drive vendor management, contract management, and strategic procurement optimization.
• Establish mature IT asset lifecycle and governance practices.

• Partner with executive leadership to align technology and cybersecurity strategies…