Our well established client located near Albany, NY is seeking an experienced Director of IT & Security to lead enterprise technology operations, cloud infrastructure, and information security initiatives. This role is responsible for ensuring systems are secure, reliable, and compliant with industry standards while supporting business growth and cross-functional collaboration.

Position Overview:
 The Director of IT & Security oversees all aspects of IT operations, cloud infrastructure, and the organization's information-security program. This leader ensures compliance with regulatory frameworks such as SOC 2 and HIPAA, manages third-party vendors, and supervises IT support operations while advancing long-term technology and security strategy.

Key Responsibilities:

Leadership & Operations

• Lead and manage IT operations, including internal staff and third-party service providers
• Promote a proactive, service-oriented, and security-focused technology culture
• Ensure company-wide adherence to standard operating procedures supporting compliance requirements
• Serve as an escalation point for complex technical and security issues

Infrastructure & Cloud Management

• Oversee the security, performance, and scalability of a cloud-based AWS environment
• Manage system architecture, backups, storage, and access controls
• Ensure reliable operation of servers, virtual machines, networks, and internal applications
• Partner with Engineering and Product teams to support deployments and DevOps initiatives
• Evaluate and implement infrastructure improvements to enhance stability and efficiency

Information Security & Compliance

• Own and maintain the organization's information-security framework
• Ensure ongoing SOC 2 and HIPAA compliance, including audit readiness and remediation
• Coordinate with compliance platforms and third-party auditors for documentation and evidence collection
• Manage encryption standards, secure data transmission, and access control policies
• Conduct risk assessments, vulnerability reviews, and incident-response planning
• Lead employee security awareness and training initiatives

IT Support & Asset Management

• Oversee IT support workflows to ensure timely, high-quality user assistance
• Manage hardware inventory, software licensing, and endpoint provisioning
• Define standards for workstation setup, patching, and security updates
• Ensure secure onboarding and offboarding processes, including access provisioning and revocation

Strategy & Project Management

• Plan and execute IT projects, system upgrades, and integrations
• Manage vendor relationships for hardware, software, and security services
• Evaluate emerging technologies to improve automation, compliance, and system reliability
• Collaborate with leadership to align IT and security strategy with business objectives
• Maintain and test business-continuity and disaster-recovery plans