VP -Chief Security Officer

Job description

About The Role

The Vice President of Enterprise Infrastructure, Cloud Transformation is a senior technology executive who leads the enterprise infrastructure strategy, cloud migration roadmap, infrastructure modernization, operational resilience, cybersecurity oversight, and enterprise technology risk management. Reporting directly to the Chief Information Officer (CIO), this executive provides regular updates to the Board of Directors, Audit Committee, and Risk Committee on enterprise infrastructure performance, cloud transformation progress, operational resilience, cybersecurity posture, technology risk, audit readiness, and regulatory compliance.

This role is primarily accountable for enterprise infrastructure operations, cloud services, cloud migration, platform reliability, network and technology services, disaster recovery, business continuity, and modernizing core technology platforms. In addition, the executive carries Chief Information Security Officer responsibilities, including cybersecurity strategy, cloud security, regulatory compliance, incident response, identity and access management, and protection of corporate assets, customer information, regulated data, and mission-critical business systems.

The executive leads an organization spanning Enterprise Infrastructure, Cloud Services, Infrastructure Engineering, Network Operations, Service Desk, Enterprise Architecture, Technology Operations, Business Continuity, Disaster Recovery, Cloud Security, Cybersecurity, Identity and Access Management, Security Operations, and Governance, Risk & Compliance. The role partners closely with executive leadership, regulators, auditors, customers, and board committees to ensure technology platforms are modern, scalable, secure, compliant, and resilient across the enterprise.

Executive Impact – This position serves as the accountable executive for enterprise infrastructure, cloud transformation, cloud migration, infrastructure operations, platform reliability, technology modernization, operational resilience, service desk, business continuity, disaster recovery, and cloud financial optimization. Security and CISO responsibilities are included as additional executive accountabilities, with oversight of cybersecurity strategy, cloud security, technology risk management, SOC 1 and SOC 2 audit programs, HIPAA compliance, incident response, and customer assurance programs in partnership with the larger enterprise programs. The role enables business growth by modernizing the organization’s technology foundation while ensuring the resilience, security, and compliance of enterprise platforms.

Key Responsibilities

Executive Leadership

Serve as a senior technology executive responsible for enterprise infrastructure, cloud transformation, cloud migration, infrastructure engineering, service desk, operational resilience, cybersecurity oversight, technology risk, and regulatory compliance

Advise executive leadership and board committees on cybersecurity threats, emerging technologies, operational risk, cloud transformation initiatives, and regulatory obligations

Establish enterprise infrastructure, cloud, and cybersecurity strategies aligned with organizational objectives, modernization priorities, operational needs, and risk tolerance

Lead executive-level cyber incident response, crisis management, and technology resilience activities

Provide regular board-level reporting on cybersecurity, infrastructure performance, cloud transformation progress, compliance posture, and enterprise risk

Cybersecurity & Risk Management

Own enterprise cybersecurity strategy, governance, risk management, and security operations

Maintain accountability for cyber risk management frameworks, policies, standards, and controls

Direct Security Operations, Threat Intelligence, Vulnerability Management, Incident Response, Identity Governance, Security Engineering, and Data Protection programs

Oversee third-party risk management, vendor security assessments, and supply chain security initiatives

Lead enterprise cyber resilience programs and security modernization initiatives

Establish and maintain Zero Trust security principles across enterprise environments

Enterprise Infrastructure & Technology Operations

Lead all enterprise infrastructure operations including cloud platforms, data center services, networks, telecommunications, compute, storage, endpoint services, service desk, and enterprise technology platforms

Direct infrastructure engineering and operational excellence programs supporting mission-critical services

Maintain accountability for system availability, capacity planning, operational performance, and technology resilience

Establish long-term enterprise infrastructure strategies that support scalability, modernization, cloud adoption, operational simplification, resiliency, and business growth

Cloud Transformation, Cloud Migration & Platform Modernization

Own the enterprise cloud migration strategy, roadmap, execution model, governance structure, and operating model across public, private, and hybrid cloud environments

Lead large-scale cloud modernization initiatives involving infrastructure migration, application migration enablement, platform engineering, cloud operations, automation, DevOps enablement, and operational optimization

Establish and maintain enterprise cloud security standards, controls, architectures, and governance frameworks

Direct cloud security architecture, cloud security posture management, workload protection, container security, and cloud-native security operations

Ensure cloud environments meet regulatory, privacy, audit, and customer assurance requirements

Partner with executive leadership to align cloud transformation investments with business objectives, cost optimization goals, operational resilience requirements, modernization priorities, and cybersecurity risk management strategies

Regulatory Compliance, Audit & Assurance

Serve as the executive owner for enterprise compliance, audit readiness, and assurance programs

Maintain executive accountability for successful completion of cybersecurity, infrastructure, and operational control audits

Direct the design, implementation, testing, and continuous improvement of internal controls supporting regulatory and compliance obligations

Lead interactions with external auditors, regulators, customers, and executive stakeholders regarding technology risk, cybersecurity controls, and compliance posture

Provide regular audit, compliance, and risk reporting to executive leadership and board committees

Compliance Program Execution

Executive owner for SOC 1 and SOC 2 compliance programs, including governance, control effectiveness, audit coordination, remediation management, and annual certification activities

Executive owner for HIPAA Security Rule compliance, ensuring the confidentiality, integrity, and availability of protected health information (PHI)

Oversee enterprise-wide risk assessments, control testing, policy governance, and corrective action programs associated with SOC, HIPAA, and related compliance frameworks

Ensure alignment of cybersecurity and infrastructure controls with regulatory requirements, industry standards, contractual obligations, and customer assurance commitments

Maintain accountability for audit findings, management responses, remediation plans, and ongoing compliance monitoring activities

Business Continuity & Operational Resilience

Maintain enterprise-wide business continuity and disaster recovery capabilities

Direct crisis management, incident management, recovery planning, and resilience testing programs

Ensure recovery capabilities meet business and regulatory requirements

Oversee critical infrastructure protection and operational continuity strategies

Financial & Organizational Leadership

Manage enterprise technology and cybersecurity operating and capital budgets

Lead a multidisciplinary organization supporting enterprise infrastructure, cloud services, cloud migration, infrastructure engineering, service desk, technology operations, cybersecurity, security operations, and compliance

Oversee strategic technology vendor relationships, managed service providers, and enterprise technology contracts

Drive technology investment strategies, modernization efforts, and operational efficiencies

Scope of Responsibility

Executive-Level Position

Enterprise-Wide Accountability

Direct CIO Reporting on Relationship

Regular Board, Audit Committee, and Risk Committee Presentation creation

Executive Sponsor for Enterprise Infrastructure, Cloud Transformation, Cybersecurity, and Operational Resilience Programs

Primary Technology Risk Advisor to Executive Leadership and Committees

Regulatory Examination Ownership

Critical Enterprise Infrastructure, Cloud Platform, and Technology Operations Oversight

Enterprise Ownership of SOC 1 and SOC 2 Audit Programs

Executive Accountability for HIPAA Security Compliance

Regulatory and Customer Assurance Program Leadership

Board-Level Audit and Compliance Reporting

Enterprise Risk Management and Cyber Resilience Leadership

Executive Ownership of Enterprise Cloud Migration, Cloud Transformation, and Platform Modernization Strategy

Accountability for Multi-Cloud Architecture, Governance, and Operational Excellence

Executive Ownership of Cloud Security Strategy, Governance, and Risk Management

Responsibility for Cloud Security Architecture, Security Engineering, and Secure-by-Design Standards

Oversight of Cloud Compliance Programs, Cloud Control Frameworks, and Regulatory Readiness

Executive Leadership of Zero Trust, Identity Security, and Data Protection Initiatives Across Cloud Platforms

Accountability for Cloud Financial Management, Infrastructure Optimization, Automation, Technology Modernization, and Cloud Operating Model Maturity

Enterprise Environment Supporting Approximately 1,000 Employees

Annual Technology Budget Responsibility

Enterprise Technology Vendor and Services Portfolio Oversight

Executive Ownership of Business Continuity and Disaster Recovery Programs

24x7 Mission-Critical Operations Accountability

#J-18808-Ljbffr

Who can apply

Review the original listing for work authorization, qualifications and employer requirements.