Director of Information Technology

Vaco by Highspring; Blue Ash (OH); On-site; USD 120,000 - 160,000; Full time

Job summary

Vaco by Highspring is seeking a Director of Information Technology for a fully onsite role in Blue Ash, Ohio. The successful candidate will lead the overall technology strategy, infrastructure, and cybersecurity efforts, ensuring alignment with business objectives and supporting U.S. Department of Defense work.

Responsibilities include managing IT operations, enforcing security policies, and ensuring compliance with CMMC Level 2 requirements. Ideal candidates have extensive IT experience, strong cybersecurity backgrounds, and excellent communication skills.

Qualifications

• 8+ years of progressive IT experience, including at least 3 years in a leadership role.
• Strong background in cybersecurity, including identity management and incident response.
• Experience in regulated environments and managing compliance initiatives.

Responsibilities

• Lead IT strategy, infrastructure, and cybersecurity efforts.
• Establish and enforce network security policies.
• Oversee IT operations such as endpoint security and incident response.

Skills

Leadership in IT

Cybersecurity expertise

Network security

Compliance management

Education

Bachelor's degree in IT, Cybersecurity, Computer Science or equivalent

Tools

CISSP certification

CISM certification

Security+ certification

Job description

Overview

Vaco has an incredible opportunity to join our client as their newest Director of Information Technology. This is a fully onsite role located in the Northern Cincinnati area. The Director of IT will be responsible for overall technology strategy, infrastructure, and cybersecurity efforts, ensuring systems are secure, scalable, and aligned with business objectives, especially supporting U.S. Department of Defense work. The role works closely with executive leadership and cross‑functional teams to meet regulatory requirements.

Responsibilities

• Lead the company's overall IT strategy, including infrastructure, systems, and security
• Establish and enforce network security policies and best practices, including access controls, monitoring, and vulnerability management
• Oversee day‑to‑day IT operations such as endpoint security, patching, firewalls, and incident response
• Own and maintain the company's incident response plan, including testing and continuous improvement
• Define and manage the technology roadmap, including evaluation and selection of tools and vendors
• Partner with leadership to align IT initiatives with business priorities and customer requirements
• Manage IT budgets, vendor relationships, and service performance expectations
• Ensure systems are scalable, resilient, and supported by strong backup and disaster recovery practices

CMMC & Compliance

• Lead all efforts related to CMMC Level 2 compliance, including planning, execution, and ongoing maintenance
• Translate NIST SP 800-171 requirements into actionable policies and technical controls
• Maintain key compliance documentation, including SSPs, POA&Ms, and system diagrams
• Ensure proper handling and protection of Controlled Unclassified Information (CUI) and Federal Contract Information (FCI)
• Support audit readiness, third‑party assessments, and remediation efforts as needed
• Track and report on key compliance metrics to executive leadership

Qualifications

• Bachelor's degree in IT, Cybersecurity, Computer Science, or a related field (or equivalent experience)
• 8+ years of progressive IT experience, including at least 3 years in a leadership role
• Strong background in cybersecurity, including identity management, network security, endpoint protection, and incident response
• Experience working in a regulated environment and leading compliance initiatives
• Ability to manage vendors, budgets, and technology decisions effectively
• Strong communication skills, with the ability to translate technical concepts for business stakeholders

Nice to Have

• Experience with CMMC Level 2 readiness or assessments
• Familiarity with NIST SP 800-171 and DoD cybersecurity requirements
• Experience working with CUI/FCI environments
• Relevant certifications such as CISSP, CISM, or Security+
• Experience with cloud platforms, security tools, and enterprise applications

Equal Opportunity Notice

Highspring LLC (d/b/a Vaco by Highspring) and its parents, affiliates, and subsidiaries are committed to the full inclusion of all qualified individuals and do not discriminate against any employee or applicant for employment because of race, color, sex, religion, national origin, age, disability, veteran status, union membership, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, political affiliation, or any other protected characteristics as required by applicable law. The company is also committed to ensuring that persons who need them are provided with reasonable accommodations; if an accommodation is needed to participate in the job application or interview process, please contact [e-mail].

Vaco by Highspring also wants all applicants to know their rights that workplace discrimination is illegal.