Director, IT Infrastructure & Security

Torchy's Tacos•Austin, TX

About The Position

The Director, IT Infrastructure & Security is responsible for the design, security, and day-to-day reliability of enterprise network and infrastructure across Torchy’s Support Center and restaurant environments nationwide. This role owns the architecture and governance of our network, cloud platforms, and identity systems, while also leading the company's security compliance across frameworks like PCI-DSS and SOX. It's a hands-on leadership role that requires both big-picture thinking and the ability to dig in when it matters most.

Requirements

Bachelor’s degree in Information Technology, Computer Science, or a related field, or an equivalent combination of education and work experience
10+ years of experience in IT infrastructure, information security, or IT risk management
Strong working knowledge of network security concepts including firewalls, IDS/IPS, SIEM, VPN, and encryption
Experience managing SOX and/or PCI-DSS compliance programs with internal and external auditors
Experience with Microsoft cloud and identity environments (Azure, Azure AD, Active Directory, MFA)
Must be authorized to work in the United States without employer sponsorship

Nice To Haves

Experience in a multi-unit restaurant or retail environment
Active security certifications such as CISSP, CISM, CISA, CRISC, or equivalent
Experience working with telecommunications vendors (e.g., AT&T, Spectrum, Verizon)

Responsibilities

Lead the planning, design, and ongoing optimization of enterprise network infrastructure across corporate and restaurant environments, establishing standards, governance processes, and best practices for network design and operational excellence.
Oversee enterprise firewall architecture, security policies, VPN connectivity, network segmentation, and access controls to protect Torchy’s systems and data.
Direct cloud infrastructure strategy and operations across Microsoft Azure, Office 365, and SaaS platforms, ensuring reliability, scalability, and security.
Lead, coach, and develop a team of IT professionals, fostering a culture of accountability, continuous learning, and collaboration.
Manage Microsoft identity environments including Active Directory, Azure AD, ADFS, MFA, PKI, and hybrid identity services to ensure appropriate access controls are in place across the organization.
Manage the annual PCI-DSS assessment engagement with external vendors, facilitate quarterly and annual penetration testing and vulnerability scanning, and maintain a complete repository of compliance artifacts and correspondence.
Ensure the creation, validation, and execution of information security policies, standards, and procedures using the NIST CSF Framework as a guide, with appropriate governance to drive adoption at all levels.
Manage IT General Controls for Digital and Enterprise IT, coordinating all responses to internal and external audit inquiries related to technology services, platforms, and projects, including annual reviews of controls, narratives, and process flows.
Evaluate exposure to security risks and threats, recommend appropriate mitigation strategies, and coordinate PCI vulnerability scanning and analysis of internal and external systems.
Manage relationships with telecommunications and technology vendors — including AT&T, Spectrum, Verizon, and others — to ensure service levels meet Torchy’s operational needs.
Lead network troubleshooting and incident response efforts, including advanced packet capture analysis and root cause remediation, and provide leadership for after-hours escalation support when critical incidents arise.
Oversee the technology budget for your area of responsibility and manage the acquisition, installation, and maintenance of the organization’s hardware and software.
Maintain a working knowledge of emerging tools — including AI — and demonstrate the ability to responsibly apply new technology to support business operations and decision-making.
Perform other duties as assigned to support the team and the business.