IT Director

Teguar Corporation•Charlotte, NC

35d•Onsite

About The Position

Teguar is seeking its first dedicated internal IT and security leader, an IT Director, to manage the company’s IT infrastructure, endpoints, and security controls. This role involves managing outsourced IT providers, driving cybersecurity and compliance initiatives (ISO 27001, cyber insurance, EU Cyber Resilience Act), and evaluating/governing AI tooling. The position also requires partnering with Product Management and Operations to operationalize AI-assisted initiatives into secure systems. This is a hands-on, individual-contributor role focused on bringing IT, security, and applied-AI ownership in-house to optimize costs. The IT Director will work alongside the regulatory lead, who handles compliance documentation and audit coordination.

Requirements

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field; or an equivalent combination of education and experience.
A minimum of 7 years of progressive IT infrastructure experience, including direct, hands-on experience with at least one recognized security framework (e.g., ISO 27001, SOC 2, or NIST CSF) — gap assessment, control implementation, or audit preparation.
Experience managing or transitioning an outsourced MSP relationship required.
Working software development or scripting experience (e.g., Python, JavaScript, PowerShell, or similar) sufficient to build and maintain internal automations, integrations, and tools — this is not a dedicated software engineering role, but the person must be comfortable writing and maintaining code.
Hands-on experience evaluating, piloting, or operationalizing AI tools or AI-assisted systems in a business setting, with an understanding of the security and data-governance guardrails required when connecting AI systems to production business data (e.g., an ERP).
Must be comfortable serving as Teguar’s sole in-house IT/security resource in a hands-on, individual-contributor capacity rather than a purely strategic or oversight role.

Nice To Haves

Familiarity with EU Cyber Resilience Act, IEC 62443, or other product-security frameworks is a plus but not required.
A relevant security certification (e.g., Security+, GSEC, or working toward CISSP) is preferred but not required.
Knowledge of: Microsoft 365 administration, including Intune, Defender, and conditional access; network, firewall, and switch administration; backup and disaster-recovery tooling; email security/filtering platforms;
AI tooling (e.g., Microsoft Copilot, Claude/Claude Code, or similar platforms); scripting/programming (e.g., Python, JavaScript, PowerShell) for internal automation and integrations;
Familiarity with an ERP system (NetSuite) a plus; Word, Excel, and Outlook.

Responsibilities

Own the day-to-day management of Teguar’s IT infrastructure — network, firewall, access points, switches, and servers — across all company locations.
Own the full lifecycle of company endpoints and devices — laptops, desktops, mobile devices, and shared/peripheral hardware — including procurement, provisioning, mobile device management (MDM), and secure decommissioning.
Manage and hold accountable Teguar’s outsourced managed services provider(s), including evaluating performance, scope, and cost, and leading any transition to a new provider or service model.
Implement and maintain core security controls: multi-factor authentication and conditional access, endpoint protection (e.g., Microsoft Intune/Defender), patch management, account and access controls, encryption, and backup and disaster recovery.
Evaluate, deploy, and govern the AI tooling used across the company (e.g., Microsoft Copilot, Claude, and similar systems), setting access controls, data-handling guardrails, and usage policy so AI adoption does not create new security or compliance exposure.
Write and maintain lightweight scripts, integrations, and internal tools to operationalize automation and AI-assisted workflows (e.g., product configuration/CPQ logic, reporting, process integrations).
Partner with Product Management and Operations to move AI-assisted initiatives from proof-of-concept to secure, production-ready systems, respecting Teguar’s risk tolerance around any system that writes to production data such as the ERP.
Build and maintain the technical evidence needed for ISO 27001 readiness (risk register inputs, system security plan, plan of action and milestones) and for Teguar’s cyber insurance application, in partnership with the regulatory lead, who owns the compliance documentation and audit process.
Answer the IT and technical-security sections of customer security questionnaires (network architecture, access control, encryption, patch cadence, incident response) so these no longer route to the President or the MSP.
Coordinate with Product Management, Quality, and contract manufacturers on the IT/network-security aspects of EU Cyber Resilience Act and IEC 62443 readiness; product-level engineering compliance work remains with those teams.
Document and maintain an incident response plan and leads periodic testing of backup, recovery, and response procedures.
Evaluate and recommend security, IT, and AI tooling (e.g., email security, endpoint protection, vulnerability scanning, AI platforms) within approved budget.
Provide informal technical guidance to employees developing cybersecurity skills, to help build future in-house capability.
Prepare regular reports on IT, cybersecurity, and AI-tooling program status, risk, and cost for leadership.
Perform other related duties as assigned by leadership.