Head of IT/Security

Head of IT/Security

Department: Information Technology/Security

Employment Type: Full Time

Location: Remote - US

Description

Role OverviewAt Rho Nutrition, technology is a critical enabler of our growth. As we continue to scale, we are looking for an experienced IT and Information Security leader who can build secure, reliable, and efficient technology operations while partnering closely with teams across the business.

The IT & Information Security Director (or Senior Manager with Director-level potential) will lead the strategy, implementation, and day-to-day management of Rho's IT infrastructure, cybersecurity program, and end-user technology experience. This role will ensure our systems are secure, compliant, and scalable while providing exceptional support to employees in a fast-paced, remote-first environment.

You'll serve as both a strategic leader and a hands-on problem solver-developing long-term technology roadmaps while also rolling up your sleeves when needed. You'll partner with leaders across Operations, Finance, People, Legal, and Product to strengthen our technology ecosystem, manage vendor relationships, and mitigate business risk.

What You'll Own

• Develop and execute Rho's overall IT and Information Security strategy.
• Lead all corporate IT operations, including endpoint management, identity and access management, collaboration tools, and employee technology support.
• Build and mature Rho's cybersecurity program, including security policies, risk management, and incident response.
• Manage IT infrastructure, SaaS applications, cloud services, networking, and endpoint security.
• Oversee technology vendor selection, contract management, licensing, and budgeting.
• Ensure compliance with security frameworks, customer security requirements, and applicable regulatory standards.
• Develop business continuity, disaster recovery, and incident response plans.
• Partner with cross-functional leaders to improve operational efficiency through technology and automation.
• Establish scalable IT processes and documentation that support a growing organization.
• Build and mentor an internal IT function while managing external managed service providers (MSPs) and security partners as needed.

Key Responsibilities

IT Strategy & Operations

• Develop and execute a multi-year IT roadmap aligned with Rho's business objectives.
• Maintain reliable, secure, and scalable IT infrastructure supporting a distributed workforce.
• Oversee administration of collaboration platforms, productivity tools, and enterprise SaaS applications (e.g., Google Workspace, Slack, HRIS, ERP, CRM).
• Manage employee onboarding and offboarding technology processes, ensuring timely provisioning and deprovisioning of equipment and system access.
• Standardize hardware lifecycle management, asset tracking, software licensing, and technology procurement.
• Develop IT policies, standards, and operating procedures that support consistency and scalability.

• Own Rho's overall cybersecurity strategy and continuously improve the company's security posture.
• Develop and maintain security policies covering identity management, endpoint protection, password management, acceptable use, data protection, and access controls.
• Implement security monitoring, vulnerability management, endpoint detection and response (EDR), multi-factor authentication (MFA), and security awareness initiatives.
• Lead incident response planning, investigation, and post-incident reviews.
• Conduct regular security risk assessments and recommend mitigation strategies.
• Partner with Legal and Compliance teams on customer security questionnaires, audits, and security certifications.

• Ensure technology controls support applicable privacy, regulatory, and contractual requirements.
• Lead vendor security reviews and third-party risk assessments.
• Maintain documentation supporting audits and customer due diligence requests.
• Develop disaster recovery and business continuity plans and coordinate periodic testing.

• Serve as a trusted technology advisor to senior leadership.
• Build strong relationships across every department to understand business needs and identify opportunities for automation and process improvement.
• Manage relationships with managed service providers, security vendors, hardware suppliers, and consultants.
• Establish service levels and performance metrics for IT support and operational excellence.
• Mentor and develop future IT team members as the function grows.

Qualifications and Experience

Required Qualifications and Experience

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field (or equivalent practical experience).
• 8+ years of progressive experience in IT, infrastructure, systems administration, cybersecurity, or technology operations.
• 3+ years of leadership experience managing IT teams, vendors, or managed service providers.
• Experience building or scaling IT operations within a high-growth company.
• Strong knowledge of cloud-based business applications, identity and access management, endpoint management, networking, and enterprise collaboration platforms.
• Experience implementing cybersecurity best practices, including MFA, endpoint security, vulnerability management, and incident response.
• Experience managing technology vendors, software licensing, procurement, and IT budgets.
• Strong understanding of security frameworks such as SOC 2, NIST Cybersecurity Framework, ISO 27001, CIS Controls, or similar standards.
• Excellent project management, communication, and stakeholder management skills.
• Ability to balance strategic planning with hands-on execution in a fast-paced environment.

Additional Preferred Qualifications

• Experience supporting a remote or hybrid workforce.
• Experience in consumer packaged goods (CPG), health and wellness, nutraceutical, dietary supplement, manufacturing, or e-commerce industries.
• Experience supporting ERP, warehouse management, CRM, HRIS, and supply chain technologies.
• Familiarity with compliance requirements related to FDA-regulated businesses or consumer products.
• Experience leading SOC 2, ISO 27001, or similar security certification efforts.
• Professional certifications such as CISSP, CISM, Security+, CCSP, PMP, ITIL, or equivalent.
• Knowledge of automation tools and no-code/low-code platforms to improve workflows, reduce manual tasks, and enhance operational efficiency.
• Demonstrated success building IT organizations from the ground up.

What Does Success Look Like in This Role
Within the first 6-12 months, you will have:

• Developed a clear IT and information security roadmap aligned with Rho's strategic priorities.
• Strengthened Rho's cybersecurity posture by implementing scalable security controls and reducing organizational risk.
• Established reliable IT support processes that deliver a consistently excellent employee experience.
• Improved identity and access management through standardized onboarding, offboarding, and role-based access controls.
• Built strong partnerships across departments and become a trusted advisor on technology decisions.
• Increased operational efficiency through thoughtful technology improvements and automation.
• Developed disaster recovery, incident response, and business continuity plans that are regularly tested and maintained.
• Improved visibility into technology assets, licensing, vendor performance, and IT spending.
• Successfully managed external vendors while establishing the foundation for a scalable internal IT organization.
• Created an IT environment that is secure, reliable, scalable, and capable of supporting Rho's continued growth.

This is an opportunity to shape the future of technology at Rho Nutrition. You'll have the autonomy to build scalable systems, strengthen our security posture, and create an exceptional technology experience for our team while enabling the next phase of the company's growth.