VP, Information Security & IT Ops (Hybrid/Remote)

Evolving Solution Services; Town of Florida, Northern (NY, KY); Hybrid; USD 140,000 - 180,000; Full time

Job summary

Sightview Software LLC in Atlanta, GA seeks a VP of Information Security & IT Operations to own the security program and IT infrastructure. This executive leads SOC 2 Type II and HITRUST initiatives, steers risk management, policy development, and cross‑functional collaboration with DevOps, Engineering, and Product to embed security by design.

The role reports to the C-suite, manages budgets, vendors, and staff, and guides incident response, privacy program, and regulatory compliance

Qualifications

• 9-11 years of progressive experience in information security and/or IT leadership, incl. 3+ years exec-level ownership of security and IT operations.
• Experience leading SOC 2 Type II and HITRUST certification and audit cycles.
• Strong knowledge of security frameworks (NIST CSF, ISO 27001, HITRUST CSF) and risk management.

Responsibilities

• Lead corporate IT operations & infrastructure across location strategy, budgets, and vendor management.
• Own enterprise cybersecurity program end-to-end, including SOC 2 Type II, HITRUST, policy development, and risk management.
• Embed secure-by-design practices with DevOps/Engineering and manage third-party security risk.

Skills

Leadership

Security governance

Communication

Cloud security

Risk management

Auditing

Education

Bachelor's degree in Information Security, Computer Science, Information Technology, or related field

Tools

AWS

SOC 2 Type II

HITRUST

ISO 27001

NIST CSF

Job description

Sightview Software LLC in Atlanta, GA seeks a VP of Information Security & IT Operations to own the security program and IT infrastructure. This executive leads SOC 2 Type II and HITRUST initiatives, steers risk management, policy development, and cross‑functional collaboration with DevOps, Engineering, and Product to embed security by design.

The role reports to the C-suite, manages budgets, vendors, and staff, and guides incident response, privacy program, and regulatory compliance