Information Technology Operations and Security Manager

CapCenter; Richmond (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

CapCenter seeks a Manager, IT Operations & Security to lead and evolve our information security program, governance standards, and technology infrastructure strategy. The role emphasizes risk evaluation, policy influence, and guiding strategic technology decisions in line with regulatory requirements.

The position requires strong analytical and strategic problem-solving abilities and is classified as exempt, with no overtime eligibility, guiding senior IT and security functions across

Responsibilities

• Develop, enhance, and manage the organization's information security program, ensuring alignment with business needs, regulatory requirements, and industry best practices.
• Influence and support the development of internal IT and security policies, standards, and procedures.
• Interpret information security compliance requirements and propose actionable strategies, presenting leadership with options and risk assessments for decision-making.
• Conduct ongoing risk assessments and recommend improvements to security controls, processes, and technologies.
• Evaluate system vulnerabilities and potential cybersecurity incidents and identify long-term remediation strategies and control improvements.

Job description

The Manager, IT Operations & Security is responsible for developing, maintaining, and continuously improving the company’s information security program, IT governance standards, and technology infrastructure strategy. This leadership role focuses on evaluating risk, recommending solutions, influencing policy, managing vendor relationships, and guiding key technology decisions in alignment with regulatory requirements.

The role requires advanced analytical skills, strategic problem-solving abilities, and strong judgment in selecting tools, approaches, and methodologies. This position is classified as exempt and is not eligible for overtime pay.

Key Responsibilities

Information Security & Governance

• Develop, enhance, and manage the organization's information security program, ensuring alignment with business needs, regulatory requirements, and industry best practices.
• Influence and support the development of internal IT and security policies, standards, and procedures.
• Interpret information security compliance requirements and propose actionable strategies, presenting leadership with options and risk assessments for decision-making.
• Conduct ongoing risk assessments and recommend improvements to security controls, processes, and technologies.
• Evaluate system vulnerabilities and potential cybersecurity incidents and identify long-term remediation strategies and control improvements.

Strategic Technology Planning

• Recommend technology strategies, tools, platforms, and system enhancements to support business objectives.
• Analyze complex technical and operational challenges, proposing solutions that reduce risk, improve efficiency, or enhance capability.
• Provide expert guidance on infrastructure improvements, system lifecycle planning, and modernization opportunities.
• Contribute to the evaluation, selection, and negotiation of contracts with technology vendors, cybersecurity service providers, and software suppliers.
• Manage ongoing technology vendor relationships to ensure performance, service quality, and alignment with organizational goals.
• Recommend appropriate technology vendor changes, renewals, or terminations based on performance evaluations and technology strategy.

Project Leadership & Cross-Functional Collaboration

• Oversee key IT initiatives, ensuring projects meet scope, timeline, and quality expectations.
• Collaborate closely with leadership and business units to understand needs and translate them into technical solutions.
• Ensure documentation of programs, systems, and processes is complete, accurate, and aligned with governance standards.

Operational Oversight & Continuous Improvement

• Monitor IT system performance trends and identify opportunities for long-term improvements, automation, or process redesign.
• Develop strategies that minimize operational risk and enhance resiliency rather than performing direct tactical support tasks.
• Maintain visibility into hardware, software, and asset lifecycle status, recommending procurement or retirement actions as needed.
• Drive continuous improvement across all areas of responsibility by spending significant time evaluating systems, analyzing issues, and proposing forward-looking enhancements.