Director, Information Technology

Campaign Legal Center•Washington, DC

About The Position

Campaign Legal Center (CLC) is seeking its first Director of Information Technology to set technology strategy in consultation with organizational leadership and be accountable for the systems, data, security, and technology outcomes that support CLC. This is a hands-on leadership role spanning technology planning and governance, business systems, infrastructure, vendor relationships, cybersecurity, risk, compliance, and digital transformation. The Director will own CLC’s technology ecosystem end to end, including purchasing decisions, integrations, costs, security, and the realization of organizational benefits. CLC delivers technology through a hybrid model of cloud platforms, a managed service provider, and specialist consultants. The Director will report to the Vice President, Operations and Finance and manage the full-time IT administrator. The role requires translating technical matters for non-technical audiences while also engaging directly in technical problem-solving, such as resolving system integrations with vendors. The Director will develop a multi-year technology roadmap and oversee budgets, projects, enterprise business systems, data governance, infrastructure, vendors, service delivery, and staff technology support. The Director will also lead CLC’s information security program, establish cybersecurity governance and risk practices, protect sensitive information, and coordinate compliance-related work with organizational teams and external partners. The Director will identify opportunities to automate processes and improve digital experiences, evaluate emerging technologies including AI, and establish appropriate security, privacy, and organizational controls. The role also owns IT policies and standards, supports adoption and change management, and advises leadership on technology platforms, consolidation, and vendor risk. Candidates should have a bachelor’s degree in a relevant field or equivalent professional experience, along with 12 or more years of progressive IT experience and at least five years in IT leadership or management. CLC prefers experience in a nonprofit, professional society, or membership organization; relevant professional certifications; and experience developing or applying AI policies or evaluating AI-enabled tools. The salary range is $161,300–$233,900, with placement commensurate with experience. CLC offers a comprehensive benefits package, including health, dental, and vision insurance; retirement matching; paid leave; professional development support; and other benefits.

Requirements

Bachelor’s degree in information technology, computer science, information systems, or a related field; equivalent professional experience may substitute for a degree.
At least 12 years of progressive information technology experience.
At least five years of IT leadership or management experience with responsibility for technology strategy, budget, and vendor management.
Working command of information security fundamentals, including identity and access management, endpoint protection, vulnerability management, incident response, and security awareness training.
Working familiarity with a recognized security framework such as NIST CSF, CIS Controls, or ISO 27001, and with PCI DSS obligations.
Experience managing external vendors and managed service providers, including contract negotiation and service-level accountability.
Experience administering a modern cloud productivity environment, most commonly Microsoft 365, including security and compliance controls.
Proven ability to explain technical concepts and risk to non-technical staff.
Demonstrated experience leading cross-functional technology projects and guiding organizational change through new system adoption.
Ability to operate as a hands-on practitioner when needed while remaining accountable for outcomes delivered through staff, vendors, and service providers.

Nice To Haves

Experience in a nonprofit organization, professional society, or membership organization with outsourced accounting, development, or other CRM/AMS partners.
Relevant professional certification, such as CISSP, CISM, Security+, PMP, ITIL, or a platform-specific administrator credential.
Experience developing or applying an organizational artificial intelligence policy and evaluating AI-enabled tools.

Responsibilities

Develop and maintain a multi-year technology roadmap aligned with the organization’s strategic plan.
Own the annual IT operating and capital budget, forecast renewals, model total cost of ownership, and present funding requests to the Vice President.
Establish and lead technology governance for prioritizing requests, approving systems, and preventing shadow IT.
Define and report on IT service metrics, including uptime, ticket resolution, project delivery, and user satisfaction.
Supervise, coach, and develop IT staff and build technical capability among non-IT staff through training and documentation.
Oversee the IT project and initiative portfolio, including prioritization, resource planning, delivery against scope, schedule, and budget, and confirmation of implementation results.
Own the enterprise business systems portfolio, including integrations, configuration standards, and named system owners.
Establish data governance practices for data ownership, quality, access, and retention in partnership with department heads.
Manage cloud and on-premises infrastructure, including identity and access management, endpoint management, network and Wi-Fi, backup, and disaster recovery.
Own the managed service provider relationship, define its scope of work, hold it accountable to service levels and security and operational standards, verify controls, track remediation, review performance, and escalate issues.
Maintain a complete asset and software inventory, including licenses, contract terms, renewal dates, and business owners.
Lead IT vendor selection and procurement, including requirements, structured evaluations, contract and pricing negotiations, and renewals.
Serve as the escalation point for staff technology support and ensure issues are resolved and root causes addressed.
Manage business continuity and disaster recovery planning, including critical process identification, recovery objectives, MSP coordination, and at least annual restoration testing.
Own the information security program, including written policies and a regularly reviewed incident response plan.
Establish cybersecurity governance aligned with a recognized framework, including security posture management, leadership reporting, and documented risk acceptance.
Protect sensitive donor, legal, and staff information through data classification, access controls, and encryption standards.
Commission and act on risk assessments and penetration or vulnerability testing, and maintain a remediation plan with owners and due dates.
Administer identity security controls, including multi-factor authentication, least-privilege access, privileged account management, and onboarding and offboarding procedures.
Collaborate with the development team to safeguard donor data in accordance with applicable privacy obligations and contractual commitments.
Collaborate with the finance team and external accounting partner on compliance for payment channels and processors.
Deliver staff security awareness training and phishing simulations and report participation and results to leadership.
Collaborate with the Vice President on cyber liability insurance requirements, carrier questionnaires, and assessment of third-party vendor security before contracting.
Identify and prioritize opportunities to automate manual processes and improve the digital experience, with a documented business case for each.
Lead evaluation and adoption of emerging technologies, including AI, with appropriate security, privacy, and organizational controls.
Own IT policies, standards, and governance in collaboration with leadership, maintain them on a regular review cycle, and monitor compliance and enforcement.
Champion adoption and change management for new systems and enterprise-wide services.
Monitor the technology landscape and advise leadership on emerging platforms, consolidation, and vendor risk.

Benefits

Health, dental, and vision insurance with low employee premiums.
401(k) retirement plan with a dollar-for-dollar match up to 6%, with immediate vesting.
20 vacation days, 12 sick days, and 3 floating holidays annually.
16 weeks of fully paid parental leave, 10 days of bereavement leave, and 8 weeks of sabbatical leave for those who qualify.
Office closures for federal holidays and typically one week in late summer and one week in winter.
Flexible Spending and Dependent Care Accounts.
$1,000 annual professional development stipend and bar membership reimbursement.
$500 annual technology allowance.
Pre-tax metro smart benefits.
New family and family planning support, including reimbursement for travel to access legal reproductive healthcare.
Employee Assistance Program with free, confidential support for personal, financial, and family matters.