Job Purpose
The Technology and Security Manager is responsible for developing and executing the organization's technology strategy while providing leadership and oversight of its information systems security and compliance programs.
This position oversees technology operations, IT infrastructure, software development, cybersecurity, quality management, regulatory compliance, and risk management to ensure the organization's systems and processes are secure, reliable, scalable, and aligned with business objectives.
This position will collaborate with executive leadership, business units, system owners, and technical teams to establish technology priorities, implement secure and effective solutions, manage cybersecurity risks, support and maintain the organization's ISO 9001 Quality Management System (QMS) and CMMC compliance program, and maintain compliance with applicable federal government and industry requirements.
Duties and Responsibilities
Technology Strategy and Leadership
- Develop and execute a comprehensive technology strategy aligned with the company's business objectives, growth plans, scalability, and operational efficiency.
- Provide leadership and oversight of the organization's technology operations, software development, infrastructure, and cybersecurity functions.
- Collaborate with executive leadership and stakeholders to identify technology needs and support technology-enabled business initiatives.
- Evaluate emerging technologies and recommend solutions that enhance company products, services, and internal processes.
- Oversee the design and implementation of secure, scalable technology systems, software solutions, and infrastructure.
- Lead and support technical personnel, including IT staff, security personnel, and other technology team members.
- Promote collaboration, continuous learning, and the adoption of technology best practices.
- Manage the setup, configuration, logistics, refresh, and secure disposal of company laptops and end-user devices, including maintaining an accurate asset inventory.
IT Operations and Infrastructure Management
- Oversee the organization's IT infrastructure, network operations, systems architecture, data management, and security protocols.
- Ensure technology systems maintain operational reliability, performance, availability, and data integrity.
- Develop and implement disaster recovery plans and business continuity strategies.
- Manage technology vendors and partners, including evaluating and selecting appropriate technology solutions and services.
- Develop and manage the technology budget, ensuring effective resource allocation and cost-effective solutions.
- Oversee technology projects to ensure successful completion within established timelines and budgets.
- Serve as the primary technical writer for sales proposals, providing technical expertise and documentation to support business development initiatives.
Information Systems Security and Compliance
- Lead and manage the organization's information systems security program.
- Develop, implement, and maintain information security policies, procedures, and standards.
- Oversee cybersecurity compliance with applicable frameworks and regulatory requirements, including NIST, ISO 27001, SOC 2, HIPAA, FedRAMP, and DoD requirements, as applicable.
- Manage system authorization, risk management, and continuous monitoring processes.
- Provide leadership and oversight to Information Systems Security Officers (ISSOs), security analysts, and supporting IT personnel.
- Identify, assess, and manage cybersecurity risks and recommend appropriate mitigation strategies.
- Oversee vulnerability management, incident response, and security remediation activities.
- Serve as the primary point of contact for security audits, assessments, and inspections.
- Coordinate security requirements with system owners, engineering teams, IT operations, and executive leadership.
- Integrate security requirements into system design, software development, and technology operations.
- Ensure compliance with applicable data privacy and information security requirements.
- Monitor emerging cybersecurity threats, technologies, and industry best practices.
- Manage and maintain the organization's ISO 9001 Quality Management System (QMS) and certification, including coordinating audits, maintaining required documentation, addressing corrective actions, and supporting ongoing compliance and continuous improvement activities.
- Manage and support the organization's CMMC compliance program, including coordinating assessments, maintaining required documentation, monitoring compliance requirements, addressing identified gaps, and supporting ongoing cybersecurity compliance efforts.
Risk Management and Executive Reporting
- Develop and implement strategies to mitigate technology-related and cybersecurity risks.
- Track and report the organization's security posture, identified risks, and compliance status to executive leadership.
- Provide recommendations for technology improvements, security enhancements, and corrective actions.
- Coordinate cross-functional efforts to address security findings and maintain compliance.
- Support informed executive decision-making through technology assessments, risk evaluations, and operational reporting.
Qualifications
Minimum Education & Experience:
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Minimum of 5 years of experience as a technology officer or in a similar senior technology leadership role, preferably within the federal government market.
- Experience in information security or IT, including leadership or management responsibilities.
- Demonstrated experience managing IT infrastructure, technology budgets, software development, and systems architecture.
- Strong knowledge of cybersecurity frameworks and risk management practices, including NIST RMF, ISO 27001, and CIS Controls.
- Experience managing security compliance, audits, and system accreditation or authorization processes.
- Extensive knowledge of software development methodologies, infrastructure management, and cybersecurity best practices.
- Experience leading technology projects and delivering results within established timelines and budgets.
- Strong understanding of technology trends and the federal government technology landscape.
- Experience supporting digital transformation initiatives and implementing technology solutions.
- Demonstrated ability to lead cross-functional teams and collaborate with executive leadership and stakeholders.
- Strong analytical, decision-making, and problem-solving skills.
- Excellent written and verbal communication skills, including executive-level reporting.
- Strong technical writing skills.
- Experience supporting or managing ISO 9001 Quality Management Systems (QMS) and CMMC compliance requirements, including audits/assessments, documentation, corrective actions, and ongoing compliance activities.
Preferred Skills and Qualifications
- Master's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Professional certifications such as CISSP, CISM, CAP, PMP, ITIL, or AWS.
- Experience supporting government, defense, or highly regulated environments.
- Experience with cloud technologies and cloud security, including AWS, Azure, or GCP.
- Familiarity with Agile, DevOps, and DevSecOps methodologies.
- Experience with secure system development lifecycles.
- Experience managing security tools, including Security Information and Event Management (SIEM) systems, vulnerability scanners, and Governance, Risk, and Compliance (GRC) platforms.
- Knowledge of regulatory and compliance frameworks relevant to the federal government market.
- Strong understanding of data security, digital asset protection, and risk mitigation.
- Ability to translate business objectives into effective technology and cybersecurity initiatives.
Physical and Work Requirements
- Ability to work in a standard office or remote environment, as authorized by the company.
- May require after-hours availability to support security incidents, critical system changes, or technology-related emergencies.
Work Schedule and Location
Full-time position. Work location and arrangement will be determined based on company requirements.
The position may require availability outside normal business hours to address critical technology operations, cybersecurity incidents, or system-related emergencies.
