Director of IT Infrastructure & Security (FedRAMP/CJIS)

VIA; Somerville (MA); Hybrid; USD 200,000 - 250,000; Full time

Benefits offered by this job

Salary: $200,000–$250,000 USD per year

401(k) plan

Health benefits

Parental leave: 24 weeks

Flexible vacation

Remote work options

Office locations

Mentorship programs

Wellness program

Transit benefits

Job summary

VIA seeks a strategic Director of IT Infrastructure & Security to lead corporate technology and enterprise security operations. You’ll own system architecture, the IT budget, and the team’s technical leadership, guiding VIA toward a proactive, automated technology environment.

In VIA’s flat, coaching culture, you’ll collaborate with Design and DevOps to implement CJIS, CMMC, SOC 2, and FedRAMP controls, IAM, and MDR.

Qualifications

• U.S. Citizenship and ability to pass background checks for federal-level data and SCIF facilities.
• 7+ years in Corporate IT, Enterprise Security, and Cloud Infrastructure in a fast-paced tech org.
• Experience guiding strict compliance audits (SOC 2, CJIS, CMMC) and FedRAMP.
• Collaborative with Design/Engineering to balance security with user experience.
• Comfort in a flat, coaching-driven culture with influence over authority.

Responsibilities

• Provide senior technical authority for corporate IT and mentorship to the IT team, aligning with POps.
• Lead compliance governance for CJIS, SOC 2, CMMC, and FedRAMP in IT controls.
• Ensure IAM, MDR coverage, and vulnerability monitoring extend to the product platform.
• Oversee security operations with external SOC and MDR providers.
• Manage IT budget, vendor relations, and software licensing renewals.
• Champion Infrastructure as Code (Terraform) for rapid disaster recovery.

Skills

Security architecture

Identity management

MDM (Jamf)

Okta

Google Workspace

MDR solutions

SOC coordination

AWS

Terraform / IaC

Tools

Jamf

Okta

Google Workspace

MDR

AWS

Terraform

Job description

VIA seeks a strategic Director of IT Infrastructure & Security to lead corporate technology and enterprise security operations. You’ll own system architecture, the IT budget, and the team’s technical leadership, guiding VIA toward a proactive, automated technology environment.

In VIA’s flat, coaching culture, you’ll collaborate with Design and DevOps to implement CJIS, CMMC, SOC 2, and FedRAMP controls, IAM, and MDR.