VP of Information Systems & Security
- Moves you to
- United States
- Support
- Relocation support
- Posted
Is this job info correct?
70,464 relocation jobs, straight from company career pages
100% free · New jobs every minute
Show job descriptionHide job description
About Overwatch Mission Critical
Overwatch is a service-disabled Veteran-owned small business (SDVOB) certified through the National Veterans Business Development Council (NVBDC), delivering construction professional services, talent acquisition, and general contractor solutions within the mission-critical infrastructure industry. Our focus is the construction and management of state-of-the-art data centers, executed with the precision and reliability this industry demands. From high-end engineers to seasoned field professionals, we deploy the talent needed to bring complex infrastructure to life. At Overwatch, it's more than a job — it's purpose.
The Role
Overwatch Mission Critical is looking for a Vice President of Information Systems & Security to strengthen how we protect, govern, and operate our enterprise technology environment.
This is a security-first technology leadership role with an immediate focus on cybersecurity, data privacy, governance, risk, and compliance.
As Overwatch continues to scale across a distributed, field-based workforce in the United States and Europe, we need a technology environment that is secure, resilient, well governed, and capable of scaling with the business. This role will build the security and privacy foundation while helping establish the operating standards and discipline required across enterprise technology.
The VP will work across Technology, Business Platforms & Intelligence, Legal, HR, Finance, and business leadership to translate risk and business requirements into practical controls, operating standards, and technology priorities.
This role reports to the SVP, Technology and will serve as a senior technology partner to the executive team.
What You Will Own:
Cybersecurity
The immediate mandate is building a practical, scalable security program that protects the enterprise without slowing the business.
You will:
- Own the enterprise cybersecurity strategy, roadmap, architecture, and security operating model
- Establish identity as a primary security control plane across single sign-on, conditional access, privileged access, joiner-mover-leaver processes, and access recertification
- Drive endpoint security, vulnerability management, encryption, detection, response, and security monitoring across a distributed environment
- Own incident response planning, exercises, escalation, and executive communication during material security events
- Build security awareness and role-based training focused on measurable behavior and risk reduction
- Partner with technology and business leaders to embed security into systems, integrations, infrastructure, and enterprise AI use cases
Governance, Risk & Compliance
This leader will establish a durable control and risk environment that can support client requirements, growth, and increasing enterprise complexity.
You will:
- Own the technology policy framework, risk register, control environment, testing calendar, exceptions, remediation, and executive reporting
- Lead SOC 2 Type I and Type II readiness and examinations end to end, including scope, control design, evidence, examiner management, findings, and remediation
- Maintain alignment to applicable frameworks such as NIST CSF, ISO 27001, NIST SP 800-171, or CMMC as business and client requirements evolve
- Build a tiered third-party technology and security risk program and hold managed service providers and vendors accountable for control performance
- Translate client contracts, insurance requirements, and applicable obligations into practical technology controls and ownership
- Provide clear executive-level reporting on technology risk, investment trade-offs, control effectiveness, and remediation priorities
Data Privacy & Information Governance
Security and privacy must extend to how Overwatch creates, accesses, shares, retains, and uses information across the enterprise.
You will:
- Own the enterprise data privacy program in partnership with Legal, HR, Business Platforms & Intelligence, and business leadership
- Establish practical standards for data classification, access, handling, retention, sharing, and deletion across enterprise platforms
- Translate applicable U.S. and EMEA privacy requirements into technology controls and operating practices
- Lead privacy-by-design reviews for new systems, integrations, AI use cases, and material changes in data processing
- Establish processes for privacy incidents, third-party data handling, data requests, and cross-border considerations
- Partner with data and platform leaders to strengthen governance across collaboration platforms, the data environment, analytics, and AI
Technology Operations & Enterprise Resilience
This role will also help strengthen the operating discipline around enterprise technology so the environment remains reliable, scalable, and well controlled as the company grows.
You will:
- Partner with technology leadership to establish operating standards across identity, endpoint management, collaboration platforms, infrastructure, service management, and enterprise technology vendors
- Define and monitor technology service health, incident management, availability, support performance, operational risk, and escalation
- Oversee the operating effectiveness of managed service providers and outsourced technology partners, including service levels, performance, escalation, and accountability
- Drive standardization and automation across employee technology lifecycle processes, including onboarding, offboarding, device management, and access
- Build appropriate business continuity, disaster recovery, and technology resilience capabilities for a distributed organization
- Identify opportunities to simplify the technology estate, strengthen controls, improve service, and manage technology cost effectively
How You Will Work:
This role sits at the intersection of security, risk, privacy, and technology operations and requires strong judgment.
You should be comfortable moving from a board-level conversation about cyber risk or privacy into the operating detail of an identity control, vendor issue, incident, or service problem.
You will work closely with leaders across:
- Business Platforms, Data & Intelligence
- Legal and Compliance
- Human Resources
- Finance
- Procurement
- Business Enablement & Program Delivery
- Operating companies
The VP will combine hands-on operating depth with executive-level judgment, building the right controls and capabilities for Overwatch rather than simply applying frameworks.
What Success Looks Like:
Within the first 12 months, we should see measurable evidence that Overwatch has a stronger security, privacy, risk, and technology operating foundation.
Examples include:
- A documented enterprise security, privacy, and technology risk posture with clear priorities, owners, and remediation plans
- SOC 2 milestones delivered on plan with a sustainable evidence and control-testing process in place
- Stronger identity, endpoint, access, and data protection controls across the enterprise
- A functioning data privacy and information governance program with clear ownership and operating practices
- A tiered third-party risk and vendor oversight model operating consistently
- Improved visibility into technology service health, incidents, operational risk, and vendor performance
- Business continuity and technology resilience plans established and exercised
- Clearer executive visibility into technology risk, investment needs, performance, and trade-offs
- A technology operating environment positioned to support continued growth without creating unnecessary complexity or risk
What We Are Looking For
We are looking for a security-first technology operator who can build the capabilities we need today and has the breadth to lead across a growing enterprise technology environment.
The right person will bring:
- Bachelor's degree in Information Technology, Cybersecurity, Information Systems, Computer Science, or a related field, or equivalent relevant experience
- 12+ years of progressive experience across enterprise technology, cybersecurity, infrastructure, IT operations, GRC, or comparable technology leadership roles
- Significant leadership experience across at least two of the following: cybersecurity, enterprise IT operations, infrastructure, GRC/data privacy, or technology service delivery
- Demonstrated ownership of a cybersecurity and compliance program, including hands-on leadership of SOC 2 and/or ISO 27001
- Working knowledge of data privacy and information governance, ideally spanning U.S. and EMEA operations
- Deep Microsoft 365 and Entra ID experience, including identity, conditional access, privileged access, endpoint, and data protection controls
- Experience supporting a distributed workforce and managing enterprise technology environments at scale
- Experience owning MSPs, technology vendors, and outsourced service delivery, including SLAs, performance management, escalation, and control oversight
- Practical incident response leadership and the ability to communicate effectively with executives and outside parties during a live event
- Ability to establish operational KPIs and use data to manage service reliability, risk, performance, and technology investment
- Strong executive and board communication with the ability to explain technical risk and trade-offs to non-technical audiences
- Experience scaling technology capabilities through significant organizational growth
- Prior responsibility spanning both cybersecurity and enterprise IT operations, infrastructure, or end-user technology strongly preferred
- CISSP, CISM, CCISO, CRISC, CISA, or comparable certifications are valued but not required
- Experience in construction, engineering, staffing, infrastructure, data centers, field services, or another distributed operating environment is a plus
The Profile
This person is a builder and an operator.
They naturally ask:
Where is the enterprise most exposed?
What data are we protecting, who has access to it, and why?
Are our controls actually operating, or do they only exist on paper?
Can our technology environment scale securely as the business grows?
Where are service, resilience, or vendor risks creating operational exposure?
What should we own internally, and what should we expect from our partners?
What does the business actually need, and what is the simplest secure way to enable it?
What does leadership need to know, decide, or fund?
This is not a role that simply manages compliance or reports on technology risk.
It is a role that helps build and operate the technology foundation Overwatch needs to scale securely and reliably.
Benefits:
Overwatch offers a competitive salary and benefits package, including health insurance, dental insurance, vision insurance, life insurance, 401(k) retirement plan, paid time off, and relocation assistance available.
OVERWATCH is committed to creating a diverse work environment and is proud to be an Equal Opportunity Employer. OVERWATCH considers candidates regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.