Vice President of Technology & Security

Ecs4Kids•Jacksonville, FL

11d•Hybrid

About The Position

The Vice President of Technology & Security serves as a strategic technology partner to executive leadership, translating agency goals into a multi-year technology and security roadmap. The Vice President provides strategic leadership and oversight of all IT and information security functions for Episcopal Children's Services (ECS4Kids), ensuring the reliability, security, compliance, and effectiveness of the agency's technology infrastructure, cloud platforms, telecommunications, and information assets across a 24-county service territory in Florida and Georgia. Serving as the agency's Information Systems Security Oficer (ISSO), the Vice President owns cybersecurity, data governance, business continuity/disaster recovery, vendor management, technology planning, and regulatory compliance, and protects sensitive child, family, employee, and agency information. The role develops technology policies, procedures, and security controls that align with organizational strategy, compliance requirements, and risk tolerance. The Vice President advises executive leadership and the Board of Directors on technology strategy, cybersecurity risk, and emerging technologies, and builds the technical and leadership capacity of a lean IT team supporting more than 1,000 end users across the agency's geographic footprint. In a department of this size, the Vice President is expected to operate as a player-coach — moving fluidly between strategic leadership and direct technical engagement as operational demands require.

Requirements

Bachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Business Technology, or a related field.
Seven (7) to ten (10) years of progressively responsible IT experience, including leadership over cybersecurity, SaaS/cloud platforms, telecommunications, end user support, vendor management, compliance, and strategic technology planning.
Demonstrated experience reading and interpreting SOC 1 (Type II) and SOC 2 (Type II) audit reports, evaluating bridge letters, defining CUECs, and conducting material weakness assessments in a compliance context.
Experience leading information security initiatives, technology projects, and business continuity/transformation efforts preferred.
Experience in nonprofit, education, healthcare, human services, government, or similarly regulated environments preferred.
(A comparable amount of training, education, or experience can be substituted for minimum qualifications.)
Ability to provide strategic, forward-looking IT leadership, identifying risks and recommending proactive improvements.
Demonstrated ability to operate effectively at both the strategic and operational level — equally comfortable presenting cybersecurity risk to the Board and troubleshooting a network outage or SaaS misconfiguration alongside IT staff.
Ability to deine problems, interpret technical and diagrammatic instructions, and draw valid conclusions from data.
Ability to install, maintain, and support Windows environments, Active Directory, and related networking tools as needed (primary environment is SaaS-based).
Ability to oversee and develop end user support operations serving 1,000+ distributed users with a small IT team.
Ability to manage telecommunications infrastructure (internet, VoIP, network) across a large multi-site geography with limited on-site IT staff.
Demonstrated ability to read, interpret, and act upon SOC 1 and SOC 2 audit reports: identifying control gaps, defining CUECs, evaluating bridge letters, and performing material weakness risk assessments.
Expert-level knowledge of SaaS platform administration, security coniguration, and integration — particularly Microsoft 365, and ERP/HCM platforms such as NetSuite and Paylocity.
Knowledge of cybersecurity best practices — encryption, threat monitoring, incident response — for safeguarding conidential child and family information.
Ability to develop clear technical documentation, including system diagrams, SOPs, security protocols, and DR/BC plans.
Ability to train, mentor, and build leadership and technical capacity within the IT department.
Knowledge of state and federal data privacy/security requirements applicable to human services and early childhood programs (e.g., Head Start, Florida OEL/ELC).
Ability to evaluate IT vendors for compliance with statutory, contractual, and data security requirements, and to lead breach investigations and required notifications.
Knowledge of data governance, records retention, and disposal requirements for human service programs.
Excellent written and oral communication skills; ability to work independently under pressure and tight deadlines.
Valid driver's license, proof of automobile coverage, and satisfactory driving record (per Vehicle Driving Policy).
Required acknowledgements: Conflict of Interest, Code of Ethics, Confidentiality Agreements, IT Systems and Security, Anti-Fraud, HR Employee Acknowledgement Form.

Nice To Haves

A recognized cybersecurity certification strongly preferred: CISSP, CISM, or CompTIA Security+, or equivalent.
SOC/audit-related credentials (e.g., CISA) or demonstrated equivalent experience preferred.

Responsibilities

Partner with leadership to anticipate technology needs, develop a multi-year technology roadmap, and identify opportunities to improve business processes, service delivery, and efficiency through technology.
Partner with Fiscal, Grants, and Program leadership to align technology investment with agency growth, funder priorities, and grant competitiveness.
Serve as liaison between users, departments, vendors, and technical support providers, and report on technology performance, risk, and compliance to executive leadership and the Board.
Oversee administration, configuration, security, and integration of the agency's SaaS ecosystem, including Microsoft 365, NetSuite (ERP), Paylocity (HCM), and other critical cloud platforms used across all program operations.
Lead evaluation, selection, procurement, contract negotiation, and lifecycle management of SaaS and technology vendors, ensuring vendors meet security, compliance, and performance obligations.
Maintain system access controls, identity management, and MFA enforcement across all cloud platforms; ensure proper ofboarding and access revocation protocols.
Oversee implementation, upgrades, and vendor support of software, enterprise platforms, and network infrastructure, coordinating with the IT Manager and Specialists across the territory.
Manage IT infrastructure — networks, cloud platforms, servers, telecommunications, and end-user devices — and oversee implementation, upgrades, and vendor support of software and enterprise platforms.
Manage IT asset lifecycle — end-user devices, mobile devices, peripherals — including procurement, deployment, tracking, and disposal, maintaining property custodian responsibilities.
Oversee end user support operations, establishing service standards, escalation protocols, and performance metrics for the IT team's helpdesk and field support functions.
Ensure the continuous availability of telecommunications infrastructure — internet connectivity, VoIP, and network services — across all 24 counties of the agency's service territory, minimizing downtime for more than 1,000 end users.
Serve as ECS's Information Systems Security Oficer (ISSO), leading a comprehensive cybersecurity program: risk assessments, vulnerability and threat management, identity/access controls, MFA, endpoint protection, security monitoring, and awareness training (including for Microsoft 365, NetSuite, Paylocity, and other cloud systems).
Lead incident response for cybersecurity events and data breaches, including investigation, containment, recovery, and required notiications.
Provide direct technical support and hands-on problem-solving when escalated issues exceed team capacity or require executive-level intervention — including troubleshooting critical system outages, network failures, SaaS misconfigurations, or security incidents alongside IT staff.
Serve as subject matter expert for third-party compliance documentation: dissect SOC 1 (Type II) and SOC 2 (Type II) reports from critical SaaS vendors, identify control deficiencies, evaluate bridge letters, define required Complementary User Entity Controls (CUECs), and perform material weakness assessments to maintain internal compliance.
Track and secure technology assets, mobile devices, and remote/cloud systems; maintain confidentiality of sensitive information encountered in the role.
Establish agency-wide data governance (classification, privacy, retention, disposal, quality) and ensure database security and access controls.
Ensure compliance with applicable state, federal, contractual, and funder technology and privacy requirements, including Head Start and Florida Early Learning standards; coordinate related audits, assessments, and cyber insurance requirements.
Maintain documented IT policies, procedures, system/security documentation, and disaster recovery, incident response, and business continuity plans, including periodic testing and succession planning within IT.
Direct technology procurement, vendor selection, contract negotiation, and lifecycle management, ensuring vendors meet security and compliance obligations.
Develop and administer the annual IT operating and capital budget, including cost-beneit analysis and hardware planning; fulfill property custodian responsibilities.
Supervise, coach, and develop IT staff, fostering a collaborative, customer-service-oriented, and continuously improving department.
Evaluate emerging technologies (e.g., AI, automation) and establish governance and acceptable-use standards for their adoption.
Serve in contract administrator/manager/supervisor and emergency duty roles as assigned; perform other related duties as assigned.