Chief Information Security Officer (CISO)

Momsmeals; Ankeny (IA); On-site; USD 180,000 - 260,000; Full time

Benefits offered by this job

PTO, holiday pay and holiday of choice

401(k) match

Life insurance

Short-term disability

Health, dental and vision insurance

Maternity/paternity leave

Health savings account (HSA)

Flex spending accounts (FSA) – health

Flex spending accounts (FSA) – depend

Employee wellness programs

Job summary

Mom's Meals seeks a Chief Information Security Officer and Vice President, IT Infrastructure, Support & Security to lead the company’s security, cloud, and technology operations. This executive will set strategy, governance, and resilience across the enterprise while enabling secure growth and innovation.

The role requires deep expertise in Azure, enterprise security, and regulatory compliance, with strong collaboration across Legal, Compliance, and Operations to protect assets and data.

Qualifications

• 12+ years of progressive technology leadership experience.
• 5+ years leading cybersecurity, infrastructure, cloud and/or IT operations teams.
• Proven enterprise cybersecurity program leadership and risk management.
• Strong experience with Microsoft Azure and enterprise tech.
• Deep knowledge of regulatory compliance, frameworks, and governance.
• Experience in incident response, IT continuity, and disaster recovery.
• Ability to influence executive stakeholders and drive initiatives.

Responsibilities

• Lead cybersecurity, infrastructure, cloud, and IT operations strategies.
• Govern security policies, standards, and governance frameworks.
• Oversee risk management, threat detection, vulnerability management, and monitoring.
• Ensure compliance with HIPAA, HITRUST, NIST, PCI-DSS, SOC, and related frameworks.
• Oversee audits, vendor risk, and regulatory obligations.
• Drive continuity planning, disaster recovery, and resilience.
• Partner with Legal, Compliance, and Privacy to align security with business goals.
• Provide executive reporting on security posture and readiness.

Skills

Cybersecurity leadership

Executive collaboration

Governance & risk management

Strategic planning

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or related field

Tools

Azure cloud

Microsoft 365

Entra ID

Intune

Microsoft Defender

Job description

The Chief Information Security Officer (CISO) and Vice President, IT Infrastructure, Support & Security is a senior technology executive responsible for the strategic leadership, governance, operational excellence, and continuous improvement of enterprise cybersecurity, cloud infrastructure, technical operations, end-user support, and technology resilience across Mom's Meals.

This role establishes and executes a comprehensive security and infrastructure strategy that protects company assets, member data, business operations, and technology platforms while enabling innovation, scalability, and business growth. As the executive leader responsible for information security, risk management, compliance, cloud infrastructure, technical support, and operational resilience, the CISO ensures that security, reliability, performance, and recoverability are embedded throughout the enterprise technology ecosystem.

Working closely with executive leadership, business stakeholders, legal and compliance teams, operations leaders, and technology partners, this role develops and maintains a secure, highly available, and scalable technology environment built primarily on Microsoft Azure and Microsoft cloud technologies.

Benefits

Our employees enjoy a generous package of benefits that we are thrilled to provide, and feel is part of what makes us different as an employer. We value our team members, and this is one way we can show it.

Benefits include:

• PTO, holiday pay and holiday of choice
• 401(k) match
• Life insurance
• Short-term disability
• Health, dental and vision insurance
• Maternity/paternity leave
• Health savings account (HSA)
• Flex spending accounts (FSA) – health and dependent

Cybersecurity Leadership & Governance

• Develop and execute the enterprise cybersecurity strategy and multi-year security roadmap
• Establish and maintain information security policies, standards, procedures, and governance frameworks
• Lead cybersecurity risk management, security operations, threat detection, vulnerability management, and security monitoring programs
• Ensure proactive defense against cyber threats and continuously improve the organization's security posture
• Provide regular cybersecurity updates, risk assessments, and strategic recommendations to executive leadership
• Lead enterprise-wide cybersecurity awareness and training programs
• Partner with business and technology leaders to ensure security is integrated into all strategic initiatives and technology investments

Information Security, Risk Management & Compliance

• Ensure compliance with HIPAA, HITRUST, NIST, PCI-DSS, SOC, and other applicable regulatory and security frameworks
• Partner with Legal, Compliance, Internal Audit, and Privacy functions to manage regulatory obligations and enterprise risk
• Oversee security audits, risk assessments, penetration testing, control validation, and remediation activities
• Maintain policies and controls that protect PHI, PII, confidential company information, and critical business systems
• Lead third-party security reviews, vendor risk assessments, and cybersecurity due diligence efforts
• Develop and implement enterprise risk management processes related to cybersecurity and technology operations
• Monitor emerging regulatory requirements and industry best practices to ensure ongoing compliance and program maturity

Infrastructure, Cloud & Platform Operations

• Own the enterprise infrastructure strategy across Microsoft Azure cloud services, networking, endpoint computing, identity management, collaboration platforms, and enterprise technology systems
• Establish standards for reliability, scalability, security, performance, and operational excellence across all technology platforms
• Lead Azure architecture, cloud governance, infrastructure engineering, automation, platform modernization, and technology lifecycle management initiatives
• Ensure Azure-based services and supporting infrastructure align with business growth objectives, security requirements, and operational expectations
• Oversee Microsoft cloud technologies including Azure, Microsoft 365, Entra ID, Intune, Microsoft Defender, and related security and productivity platforms
• Drive platform standardization, cloud optimization, infrastructure resiliency, and cost management initiatives
• Ensure enterprise infrastructure supports cybersecurity, compliance, operational continuity, and disaster recovery requirements
• Establish infrastructure roadmaps that improve reliability, simplify operations, and reduce technology risk

IT Operations & End User Support

• Lead enterprise service management, technical support, help desk operations, and end-user computing services
• Establish service delivery standards, operational KPIs, and customer experience programs that support business productivity
• Drive continuous improvement initiatives that enhance service quality, response times, and user satisfaction
• Ensure appropriate operational processes, controls, and documentation are maintained across all support services
• Develop scalable support models that effectively serve corporate, operational, remote, and field-based employees
• Foster a culture of customer service excellence, accountability, and continuous improvement within the IT organization
• Implement modern service management practices utilizing automation, self-service capabilities, and process optimization

IT/Technical Business Continuity, Disaster Recovery & Operational Resilience

• Own the strategy, governance, and execution of enterprise IT/Technical Business Continuity Planning (BCP) and Disaster Recovery (DR) programs
• Develop, implement, and maintain technology continuity and recovery strategies that safeguard critical business operations and member services
• Establish and govern Recovery Time Objectives (RTOs), Recovery Point Objectives (RPOs), service availability standards, and resilience requirements for all critical technology systems
• Lead disaster recovery planning and recovery strategy development for Microsoft Azure cloud environments, enterprise applications, infrastructure platforms, data services, and networking environments
• Oversee regular disaster recovery testing, technical business continuity exercises, tabletop simulations, failover testing, and recovery validation activities
• Partner with business leaders to ensure technology continuity plans align with enterprise operational continuity requirements
• Develop technology crisis management procedures supporting cybersecurity incidents, cloud service interruptions, infrastructure failures, and operational emergencies
• Ensure resilience, redundancy, backup, recovery, and failover capabilities are designed into all critical Azure and enterprise technology platforms
• Provide executive reporting on continuity readiness, recovery capabilities, testing outcomes, identified risks, and remediation plans

Security Operations & Incident Response

• Lead enterprise incident response, cyber crisis management, and major technology incident response activities
• Establish and maintain security monitoring, detection, investigation, containment, and response capabilities
• Coordinate internal teams, managed security partners, and external stakeholders during cybersecurity incidents
• Ensure timely containment, remediation, communication, and post-incident review processes
• Develop executive reporting and lessons-learned programs following security events and operational incidents
• Collaborate closely with infrastructure and cloud operations teams to ensure incident response, recovery, and resilience capabilities are integrated across Azure and enterprise technology environments
• Continuously improve the organization's cyber defense capabilities through threat intelligence, automation, and operational maturity initiatives

Financial Management & Strategic Vendor Partnerships

• Develop and manage security, infrastructure, cloud, and support operating and capital budgets
• Create business cases and investment strategies supporting technology modernization, security improvements, and infrastructure enhancements
• Establish strong relationships with strategic technology vendors, managed service providers, and cybersecurity partners
• Negotiate contracts, service agreements, and licensing arrangements to maximize business value
• Drive operational efficiencies and cost optimization while maintaining required service levels and security standards
• Monitor vendor performance and ensure contractual obligations are met

Leadership, Talent Development & Organizational Effectiveness

• Build, lead, and develop high-performing teams across cybersecurity, infrastructure, cloud operations, technical support, and IT operations
• Establish clear performance expectations, career development pathways, succession planning, and leadership development programs
• Foster a culture of accountability, collaboration, innovation, security-first thinking, and operational excellence
• Mentor and develop future technology leaders within the organization
• Partner with executive leadership to align technology capabilities with strategic business priorities
• Champion organizational change management and continuous improvement initiatives throughout the technology organization

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related field
• 12+ years’ progressive technology leadership experience
• 5+ years’ leadership experience managing cybersecurity, infrastructure, cloud, and/or technology operations teams
• Demonstrated experience leading enterprise cybersecurity programs and technology risk management initiatives
• Strong experience managing Microsoft Azure cloud environments and Microsoft enterprise technologies
• Deep knowledge of cybersecurity frameworks, governance practices, risk management methodologies, and regulatory compliance requirements
• Experience leading incident response, crisis management, IT/technical business continuity, and disaster recovery programs
• Proven ability to influence executive stakeholders and drive enterprise-wide technology initiatives
• Strong financial management, strategic planning, and organizational leadership capabilities

Industry Experience

• Experience within healthcare, food manufacturing, supply chain, logistics, or other highly regulated industries
• Experience with HIPAA, HITRUST, NIST Cybersecurity Framework, Microsoft Security solutions, and cloud security best practices
• Demonstrated success leading enterprise cloud transformations and cybersecurity maturity initiatives

Health & Safety Considerations

• Repetitive motions that include the wrists, hands and/or fingers
• Sedentary work that primarily involves sitting, remaining in a stationary position for prolonged periods
• Visual perception to perform job including peripheral vision, depth perception, and the ability to adjust focus