IT Strategy, Security & AI Governance Leader

CIVCO Medical Solutions

Coralville (IA)

On-site

USD 140,000 - 220,000

Full time

14 days+

Application generator

Get a reply from this employer — a resume and cover letter tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

CIVCO Medical Solutions in Coralville, IA, seeks a Director of Information Technology to set the strategic direction for technology, cybersecurity, data privacy, AI governance, and digital transformation. The role emphasizes leadership, governance, and oversight rather than hands-on technical work, aligning investments with regulatory requirements and parent company frameworks.

The director partners with executive leadership to mature security and privacy postures, optimize enterprise systems

Qualifications

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Engineering, or related field (advanced degree preferred).
10+ years of progressive IT experience, with at least 5 years in departmental or enterprise leadership roles.
Demonstrated success in strategic planning, technology governance, cybersecurity, privacy, or digital transformation leadership.
Experience guiding and managing O365 environments
Experience guiding ERP or major enterprise systems (INFOR XA a plus).
Experience working in regulated environments with strong compliance expectations.
Security or privacy certifications preferred (CISA, CISSP, CIPM, CIPP/E, Security+, etc.).
Experience overseeing AI governance or emerging technology initiatives is a plus.

Responsibilities

Establish and maintain the enterprise IT, cybersecurity, privacy, and AI governance roadmap aligned with business strategy, growth objectives, regulatory requirements, and parent company frameworks.
Advise executive leadership on technology direction, cybersecurity and privacy risk, AI trends, and digital transformation opportunities.
Govern enterprise architecture, cloud strategy, and technology investment decisions to ensure scalability, operational efficiency, and compliance.
Own enterprise cybersecurity leadership, executing the parent company security framework and maturity roadmap.
Govern threat management, vulnerability management, identity and access controls, data protection, incident response planning, and security awareness programs.
Provide reporting to executive team on cybersecurity risks, initiatives, metrics, and overall enterprise security posture.
Serve as the organization’s data privacy leader, implementing enterprise privacy policies, standards, training, and controls aligned with parent company requirements.
Oversee privacy impact assessments, data lifecycle governance, data minimization, and retention practices.
Lead organizational readiness response for privacy-related incidents and regulatory inquiries.
Lead the enterprise AI governance program, establishing policies, ethical standards, and approval processes for responsible AI use.
Evaluate and approve AI use cases and third-party AI platforms to ensure alignment with cybersecurity, privacy, regulatory, and risk requirements.
Partner with business leaders to enable AI-driven automation, decision support, and operational efficiencies that deliver measurable business value.
Own oversight for ERP, CRM, MES, Office365 and other enterprise systems, including solution lifecycle planning and integration strategy.
Guide technology evaluation, solution selection, modernization initiatives, and system integrations in partnership with business stakeholders.
Enable digital transformation, process optimization, and improved enterprise data visibility across all functions.
Build and lead a high-performing IT & Security organization through workforce planning, hiring, talent development, coaching, and performance management.
Establish, monitor, and report department-level KPIs for IT, cybersecurity, privacy, and AI governance, driving accountability and continuous improvement.
Ensure effective prioritization of resources and alignment of initiatives with enterprise strategy and business outcomes.
Serve as owner for technology, cybersecurity, and managed service vendors and partners.
Lead contract negotiation, licensing strategy, vendor performance management, and service delivery governance.
Manage departmental budgets, capital planning, forecasting, and technology investment prioritization.
Govern IT business continuity, disaster recovery, and cybersecurity incident response programs aligned with enterprise risk tolerance and business requirements.
Act as company incident leader for significant technology, cybersecurity, or privacy events, coordinating cross-functional response and executive communications.
Provide oversight and reporting for technology-related resilience, continuity, and enterprise risk management.
Serve as the primary liaison with parent company on cybersecurity and data privacy to ensure alignment, escalation, and effective execution of shared initiatives.