Director of IT & Information Security

Remote (United States)

Job Details

Location: United States

Workplace: Remote

Employment Type: Full-Time

Experience: 5+ years of progressive experience in IT, cybersecurity, information security, or related disciplines; 3+ years of leadership or people management experience

Core Areas: IT Leadership & Operations, IT Infrastructure Management, Information Security, Cybersecurity Risk Management, IT Governance, Regulatory Compliance & Audits, Cloud Infrastructure, Microsoft 365 & Azure

Compensation: $130,000–$160,000 per year

Work Authorization: U.S. citizenship required

About the Role

The Director of IT & Information Security leads enterprise IT operations, technology infrastructure, cybersecurity, information security, and technology governance. This hands-on leadership position oversees a small IT team, manages technology vendors and service providers, and develops IT policies, budgets, roadmaps, and operational processes. The role is responsible for maintaining reliable, secure, compliant, and scalable technology environments that support organizational objectives.

The position also owns the information security, risk management, and compliance programs, including security controls, vulnerability management, incident response planning, and audit readiness. Key technologies include Microsoft 365, Azure, endpoint management, identity and access management, and DevSecOps. Responsibilities involve working with leadership, technical stakeholders, external auditors, consultants, customers, and regulatory stakeholders to support government and commercial operations.

What You'll Do

IT Leadership & Operations

• Lead and manage the IT function, including supervision, performance management, and professional development of IT staff.
• Oversee daily IT operations, end-user support, device management, Microsoft 365 administration, cloud infrastructure, networking, and technology services.
• Establish, implement, and maintain IT policies, operational standards, procedures, and technical documentation.
• Manage relationships with technology vendors, consultants, external partners, and managed service providers.
• Develop and maintain IT budgets, technology roadmaps, infrastructure improvement plans, and operational initiatives.
• Ensure IT systems and infrastructure remain reliable, secure, scalable, and aligned with organizational objectives.
• Coordinate with business and technical stakeholders to align technology capabilities with operational requirements.

Information Security & Risk Management

• Own and lead the information security program, including cybersecurity governance, security operations, and risk management.
• Develop, maintain, and enforce information security policies, standards, procedures, and technical controls.
• Conduct information security and technology risk assessments, identify vulnerabilities, and implement appropriate risk mitigation controls.
• Oversee security monitoring, vulnerability management, incident response planning, and cybersecurity risk reduction activities.
• Lead cybersecurity awareness initiatives and security training programs.
• Partner with organizational leadership to identify, evaluate, prioritize, and mitigate IT and cybersecurity risks.
• Maintain security practices that support reliable technology operations and protect organizational systems and information.

Compliance & Audit Management

• Lead information security compliance initiatives and coordinate regulatory, customer, and third-party security assessments.
• Serve as the primary internal point of contact for information security audits and compliance reviews.
• Maintain audit evidence repositories, security control documentation, risk registers, and corrective action plans.
• Coordinate with external auditors, consultants, customers, and regulatory stakeholders to support compliance activities.
• Translate security frameworks, regulatory requirements, and compliance obligations into sustainable operational processes and technical controls.
• Support compliance programs involving frameworks such as CMMC, IL4 and IL5, NIST 800-171, SOC 2, ISO 27001, and FedRAMP, as applicable.
• Identify opportunities to improve audit readiness, compliance maturity, and organizational security practices.

IT Governance & Continuous Improvement

• Establish clear accountability, ownership, and oversight for IT operations, security controls, and technology governance.
• Develop technology, cybersecurity, risk management, and compliance metrics and reporting for organizational leadership.
• Build scalable IT and security processes that reduce operational risk while supporting organizational growth.
• Drive continuous improvement across IT infrastructure, technology operations, cybersecurity, and compliance programs.
• Strengthen organizational visibility into technology performance, security risks, control effectiveness, and audit readiness.
• Develop and maintain an integrated IT and information security program that supports long-term operational scalability.

Qualifications

Required Experience

• 5+ years of progressive professional experience in information technology, cybersecurity, information security, or a related discipline.
• 3+ years of experience in leadership, team supervision, or people management.
• Experience leading or supporting cybersecurity, information security compliance, risk management, or audit programs.
• Practical experience managing IT environments, technology operations, and security-related initiatives.

Required Skills

• Hands-on technical experience with Microsoft 365, Microsoft Azure, endpoint management, identity and access management, DevSecOps, and security technologies.
• Strong understanding of information security governance, cybersecurity risk management, regulatory compliance, and security control implementation.
• Experience working with one or more recognized security frameworks or assessment programs, including CMMC, IL4 and IL5, NIST 800-171, SOC 2, ISO 27001, FedRAMP, or comparable information security frameworks.
• Ability to develop and maintain IT and security policies, operational standards, procedures, and governance documentation.
• Knowledge of IT infrastructure, cloud environments, networking, endpoint administration, and enterprise technology operations.
• Ability to coordinate security assessments, manage compliance activities, evaluate technology risks, and support audit readiness.

Education & Certifications

• Master's degree in Information Technology, Cybersecurity, Information Systems, or a related field, or equivalent professional experience.

Preferred Qualifications

• Experience supporting government contractors or organizations operating in highly regulated environments.
• Experience administering or supporting Microsoft GCC High environments.
• Familiarity with Microsoft Defender, Microsoft Intune, Conditional Access, and modern enterprise security tools.
• Experience developing security policies, technical standards, operational procedures, and security control documentation.
• Professional certifications such as CISSP, CISM, CRISC, CompTIA Security+, Microsoft Azure Administrator, or equivalent credentials.
• Hands-on experience with PowerShell, Terraform, and vibe coding for Infrastructure as a Service (IaaS) cloud platforms.

First-Year Priorities

• Establish clear ownership and accountability for IT operations and information security controls.
• Improve organizational audit readiness and compliance maturity.
• Strengthen IT governance, cybersecurity processes, and risk management practices.
• Increase leadership visibility into technology performance, security risks, and compliance activities.
• Build a scalable IT and information security program that supports future organizational growth.