Director of Information TechnologyOur reputable firm with 20+ locations across the US and growing is seeking an accomplished and proactive Director of Information Technology to lead three facets of IT which include IT infrastructure, Help Desk Support Services, and IT Security. Seeking a hands-on leader that is equally capable of being technical and strategic. This pivotal role reports directly to the Chief Information Officer and is responsible for assisting in strategic direction of the IT Department. The ideal candidate will exhibit sound judgment and decisive leadership, especially when navigating complex or unprecedented scenarios. A thorough knowledge of cybersecurity regulations including NYDFS Cybersecurity Regulation, Gramm-Leach-Bliley Act (GLBA), and industry certifications such as PCI DSS, SOC 2, NIST 800-53 and ISO 27001 is essential.
Essential Duties and ResponsibilitiesInfrastructure and Systems:- Mentor System Administrators, Network Administrators managing performance and development.
- Design, implement, and maintain secure, scalable network infrastructure to support business operations and ensure optimal performance.
- Manage project plans, communications, and status reporting, ensuring timely and successful completion of infrastructure and security projects.
- Monitor project prioritization and active projects, developing dashboards and reporting mechanisms for transparency and accountability.
- Manage projects and identify critical milestones and ensure timely delivery of secure IT services across the organization.
- Coordination and execution of BCP testing aligned with schedule.
- Step in directly to troubleshoot and resolve issues when required.
Vendor Management:- Manage day-to-day vendor relationships and service performance.
- Support procurement of IT hardware, software, and services.
- Lead vendor negotiations to secure optimal terms, leveraging strong negotiation skills and market insight to ensure the firm consistently achieves the most competitive pricing and value.
Security:- Lead the development, implementation, and monitoring of robust IT security policies and protocols to safeguard company and client data.
- Maintain compliance with regulatory standards, including NYDFS Cybersecurity Regulation and GLBA, staying informed of evolving requirements.
- Oversee the implementation and management of security frameworks and certification processes (PCI DSS, SOC 2, ISO 27001).
- Contribute to strategic planning and deliver innovative short- and long-term solutions for enterprise-wide IT and security initiatives.
- Work closely with legal and compliance teams to ensure IT policies meet regulatory obligations and industry best practices.
- Develop and deliver training programs to enhance security awareness and compliance.
- Oversee the design and execution of incident response plans and disaster recovery processes.
- Stay abreast of technological and security advancements through ongoing professional development, including industry conferences, workshops, and seminars.
- Set staff goals and objectives, implementing action plans to elevate security and service quality.
- Communicate clearly and effectively with administration, staff, and clients regarding security measures.
- Coordination of yearly penetration tests, and oversight of patch management program.
- Support Audits and documentation efforts.
Helpdesk:- Direct daily Help Desk operations with the assistance of the Help Desk Supervisor.
- Champion company-wide initiatives in computer support services, emphasizing security, redundancy, and positive staff impact.
- Establish and uphold technical support and device standards, ensuring alignment with security mandates.
- Collaborate with support staff to ensure projects advance the department's mission and strategic security goals.
- Investigate and resolve inquiries, complaints, and issues with a strong emphasis on client satisfaction.
Other Duties:- Partner closely with the CIO to support development of IT strategy, priorities, and roadmap.
- Provide input on technology investments, resource planning, and operational improvements.
- Set team priorities and ensure alignment with company goals and IT direction.
Qualifications:- Preferred master's degree in information technology, cybersecurity, or a related field preferred.
- Minimum of 7 years' experience with a degree, or 13 years without a degree, in IT operations and security.
- Expertise in IT security principles, risk management, and regulatory compliance standards.
- Familiarity with NYDFS, GLBA, NIST CSF 2.0, PCI DSS, SOC 2, and ISO 27001 frameworks.
- Experience in securing Azure cloud environments and maintaining hybrid infrastructures is required.
- Strong network experience in IT infrastructure, including design, implementation, and management of enterprise networks.
- Strong grasp of business and management principles, with proven ability to oversee departmental operations.
- Exceptional communication skills and able to articulate clearly.
- Proven success in managing cross-functional teams and collaborating with executive leadership on security and compliance initiatives.
- Hands-on experience with technologies such as Cisco, Nutanix, FortiGate, SolarWinds, and Azure.
