Director of IT & Information Security

7Seventy; United States; Remote; USD 130,000 - 160,000; Full time

Job summary

7Seventy seeks a Director of IT & Information Security to lead enterprise IT operations, cyber security, and governance. The role supervises a small IT team, manages vendors, and sets policies, budgets, roadmaps, and processes to ensure secure, compliant, and scalable technology across the organization.

You will own information security programs, risk management, and audit readiness, working with leadership, auditors, and regulators on frameworks like NIST, ISO 27001, SOC 2, and FedRAMP as

Qualifications

• 5+ years of progressive IT/cybersecurity experience.
• 3+ years in leadership or people management.
• Experience leading cybersecurity, information security compliance, risk management, or audit programs.
• Experience managing IT environments and security initiatives.

Responsibilities

• Lead IT operations and security programs across the enterprise.
• Oversee IT budgets, roadmaps, and vendor relationships.
• Own information security governance, risk management, and audit readiness.
• Drive IT governance and continuous improvement across infrastructure and security.

Skills

Microsoft 365

Microsoft Azure

Endpoint Management

Identity & Access Mgmt

DevSecOps

Security Technologies

Governance & Compliance

Risk Management

Audit Readiness

Team Leadership

Education

Master's degree in IT / Cybersecurity

Tools

PowerShell

Terraform

Job description

Experience: 5+ years of progressive experience in IT, cybersecurity, information security, or related disciplines; 3+ years of leadership or people management experience

Core Areas: IT Leadership & Operations, IT Infrastructure Management, Information Security, Cybersecurity Risk Management, IT Governance, Regulatory Compliance & Audits, Cloud Infrastructure, Microsoft 365 & Azure

Compensation: $130,000–$160,000 per year

The Director of IT & Information Security leads enterprise IT operations, technology infrastructure, cybersecurity, information security, and technology governance. This hands‑on leadership position oversees a small IT team, manages technology vendors and service providers, and develops IT policies, budgets, roadmaps, and operational processes. The role is responsible for maintaining reliable, secure, compliant, and scalable technology environments that support organizational objectives.

The position also owns the information security, risk management, and compliance programs, including security controls, vulnerability management, incident response planning, and audit readiness. Key technologies include Microsoft 365, Azure, endpoint management, identity and access management, and DevSecOps. Responsibilities involve working with leadership, technical stakeholders, external auditors, consultants, customers, and regulatory stakeholders to support government and commercial operations.

What You'll Do

IT Leadership & Operations

• Lead and manage the IT function, including supervision, performance management, and professional development of IT staff.
• Oversee daily IT operations, end-user support, device management, Microsoft 365 administration, cloud infrastructure, networking, and technology services.
• Establish, implement, and maintain IT policies, operational standards, procedures, and technical documentation.
• Manage relationships with technology vendors, consultants, external partners, and managed service providers.
• Develop and maintain IT budgets, technology roadmaps, infrastructure improvement plans, and operational initiatives.
• Ensure IT systems and infrastructure remain reliable, secure, scalable, and aligned with organizational objectives.
• Coordinate with business and technical stakeholders to align technology capabilities with operational requirements.

Information Security & Risk Management

• Own and lead the information security program, including cybersecurity governance, security operations, and risk management.
• Develop, maintain, and enforce information security policies, standards, procedures, and technical controls.
• Conduct information security and technology risk assessments, identify vulnerabilities, and implement appropriate risk mitigation controls.
• Oversee security monitoring, vulnerability management, incident response planning, and cybersecurity risk reduction activities.
• Lead cybersecurity awareness initiatives and security training programs.
• Partner with organizational leadership to identify, evaluate, prioritize, and mitigate IT and cybersecurity risks.
• Maintain security practices that support reliable technology operations and protect organizational systems and information.

Compliance & Audit Management

• Lead information security compliance initiatives and coordinate regulatory, customer, and third‑party security assessments.
• Serve as the primary internal point of contact for information security audits and compliance reviews.
• Maintain audit evidence repositories, security control documentation, risk registers, and corrective action plans.
• Coordinate with external auditors, consultants, customers, and regulatory stakeholders to support compliance activities.
• Translate security frameworks, regulatory requirements, and compliance obligations into sustainable operational processes and technical controls.
• Support compliance programs involving frameworks such as CMMC, IL4 and IL5, NIST 800‑171, SOC 2, ISO 27001, and FedRAMP, as applicable.
• Identify opportunities to improve audit readiness, compliance maturity, and organizational security practices.

IT Governance & Continuous Improvement

• Establish clear accountability, ownership, and oversight for IT operations, security controls, and technology governance.
• Develop technology, cybersecurity, risk management, and compliance metrics and reporting for organizational leadership.
• Build scalable IT and security processes that reduce operational risk while supporting organizational growth.
• Drive continuous improvement across IT infrastructure, technology operations, cybersecurity, and compliance programs.
• Strengthen organizational visibility into technology performance, security risks, control effectiveness, and audit readiness.
• Develop and maintain an integrated IT and information security program that supports long‑term operational scalability.

Qualifications

Required Experience

• 5+ years of progressive professional experience in information technology, cybersecurity, information security, or a related discipline.
• 3+ years of experience in leadership, team supervision, or people management.
• Experience leading or supporting cybersecurity, information security compliance, risk management, or audit programs.
• Practical experience managing IT environments, technology operations, and security‑related initiatives.

Required Skills

• Hands‑on technical experience with Microsoft 365, Microsoft Azure, endpoint management, identity and access management, DevSecOps, and security technologies.
• Strong understanding of information security governance, cybersecurity risk management, regulatory compliance, and security control implementation.
• Experience working with one or more recognized security frameworks or assessment programs, including CMMC, IL4 and IL5, NIST 800‑171, SOC 2, ISO 27001, FedRAMP, or comparable information security frameworks.
• Ability to develop and maintain IT and security policies, operational standards, procedures, and governance documentation.
• Knowledge of IT infrastructure, cloud environments, networking, endpoint administration, and enterprise technology operations.
• Ability to coordinate security assessments, manage compliance activities, evaluate technology risks, and support audit readiness.

Education & Certifications

• Master's degree in Information Technology, Cybersecurity, Information Systems, or a related field, or equivalent professional experience.

Preferred Qualifications

• Experience supporting government contractors or organizations operating in highly regulated environments.
• Experience administering or supporting Microsoft GCC High environments.
• Familiarity with Microsoft Defender, Microsoft Intune, Conditional Access, and modern enterprise security tools.
• Experience developing security policies, technical standards, operational procedures, and security control documentation.
• Professional certifications such as CISSP, CISM, CRISC, CompTIA Security+, Microsoft Azure Administrator, or equivalent credentials.
• Hands‑on experience with PowerShell, Terraform, and vibe coding for Infrastructure as a Service (IaaS) cloud platforms.

First‑Year Priorities

• Establish clear ownership and accountability for IT operations and information security controls.
• Improve organizational audit readiness and compliance maturity.
• Strengthen IT governance, cybersecurity processes, and risk management practices.
• Increase leadership visibility into technology performance, security risks, and compliance activities.
• Build a scalable IT and information security program that supports future organizational growth.

Recruitment notice: all communication only happens from authorized email addresses ending in @7seventy.net. We never ask for payments or sensitive documents. Suspect a scam? Email [e-mail]