Vice President of Information Technology and Security

SheerID

About The Position

The Vice President of Information Technology and Security owns SheerID’s multi-year internal technology, cybersecurity, and technical data protection roadmaps, aligning investments, compliance strategies, and operating metrics with corporate growth and board-level risk tolerances. The role balances security and compliance requirements—including SOC 2 and ISO 27001—with employee productivity and engineering velocity, and establishes coordinated operating boundaries and identity governance across teams with administrative access. The position provides senior leadership for Google Workspace, JumpCloud identity and mobile device management, IT provisioning and support, and an outsourced IT support partner in the UK. It leads automated provisioning and de-provisioning across macOS, Windows, mobile devices, and SaaS licenses, and is accountable for availability, disaster recovery, business continuity, and the secure operation and improvement of corporate AI infrastructure and internal AI platforms. The VP manages the information security program, including threat intelligence, incident response, vulnerability management, zero-trust network access, endpoint protection, data governance, and compliance readiness. The role partners with the Senior Director of Data Privacy & Compliance on data classification, access controls, retention and privacy policies, GDPR and CCPA safeguards, customer security questionnaires, and third-party risk assessments. The VP works with DevOps and Engineering on security boundaries, cloud security, developer tool governance, and CI/CD practices, and with RevOps on identity and access standards for commercial systems. The position also manages the consolidated IT and Information Security budget, vendor relationships, and negotiations, while developing the IT and Security teams and applying AI and automation to build scalable operations.

Requirements

Proven experience leading both enterprise IT operations and corporate cybersecurity/compliance programs.
At least 7 years of direct people-management experience, including hiring, developing, performance managing, building trust, and driving employee engagement.
Strong experience establishing governance models alongside DevOps for production versus corporate IT and alongside RevOps for commercial tool federation.
Ability to steward company technical infrastructure and data security posture, including providing visibility into cloud data repositories and the controls protecting enterprise data assets, such as encryption, access controls, and DLP.
Demonstrated ability to collaborate across stakeholder groups and manage engineering handoffs from AI Enablement or specialized platform engineering teams to maintain secure, enterprise-grade AI infrastructure.
Demonstrated proficiency leading technology-enabled business and workflow transformations, including internal operations transformations using AI tools and solutions, and serving as an informed security advisor.
Ability to think critically, gather and organize data, define problem statements, lead collaborative problem-solving, ask insightful questions, and challenge the status quo.
Strong presentation and influence skills, including translating complex topics into compelling narratives, using data and insights to influence others, and presenting to audiences at all levels.
8+ years of progressive experience in IT and/or Information Security.
5+ years in senior leadership (Director, Senior Director, or VP) within a B2B software/SaaS organization with $50M–$150M+ ARR.

Nice To Haves

Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related technical field.
Master’s degree, MBA, or advanced technical degree.
Proficiency with Claude, Gemini, CrowdStrike, and/or other AI and AI-related tool suites.
CISSP, CISM, or CRISC certification.
Google Workspace Professional Administrator Certification.
ITIL v4 or PMP.

Responsibilities

Own multi-year internal technology, cybersecurity, and technical data protection infrastructure roadmaps; align investment, compliance strategy, and operational metrics with company growth and board-level risk tolerances.
Balance security controls and compliance mandates with employee productivity and engineering velocity.
Establish operating boundaries, coordinated work practices, and identity governance across specialized teams with system administrative access, including DevOps, RevOps, and AI Enablement.
Provide senior leadership oversight of Google Workspace, JumpCloud identity and mobile device management, provisioning, system administration, and IT service and support, including an outsourced UK support partner.
Lead automated zero-touch provisioning and de-provisioning for macOS, Windows, and mobile hardware fleets and enterprise SaaS licenses.
Maintain 99.9%+ availability, disaster recovery resilience, and business continuity across corporate technology systems.
Operationalize, secure, maintain, and improve corporate AI infrastructure, model pipelines, and internal AI platforms; build systems for data privacy, governance, and secure LLM API controls.
Manage the Information Security team and company security program, including threat intelligence, incident response, vulnerability management, zero-trust network access, and endpoint protection.
Partner with the Senior Director of Data Privacy & Compliance to implement and automate data classification, least-privilege access, and retention and privacy policies across SaaS and cloud repositories.
Oversee continuous readiness for SOC 2 Type II, ISO 27001, and other security, confidentiality, and availability frameworks; partner on technical safeguards required by GDPR and CCPA.
Own technical and infrastructure security responses for customer security questionnaires and serve as an executive escalation point on third-party risk assessments alongside the Senior Director of Data Privacy and Compliance.
Establish boundaries between corporate IT/Security and production engineering infrastructure; collaborate on cloud security posture management, developer tool governance, and secure CI/CD pipelines.
Set federated identity and access standards for commercial systems such as Salesforce and HubSpot, and ensure commercial system administrators follow central security, audit logging, and SSO policies.
Manage the consolidated IT and Information Security CapEx/OpEx budget, optimizing software licensing, hardware procurement, and security tooling.
Partner with Purchasing on strategic enterprise negotiations with software vendors, managed security service providers, and external auditors.
Lead and develop IT and Security teams, structuring functional areas such as Service Desk, Cloud Architecture, InfoSec/Compliance, and Systems Engineering and Administration.
Transform IT and Security operations into AI-forward functions using agentic AI and tooling automation to support scalable, lean operations.