VP of Information Systems & Security

Overwatch Mission Critical•Austin, TX

About The Position

Overwatch Mission Critical is seeking a Vice President of Information Systems & Security to strengthen the protection, governance, and operation of its enterprise technology environment. This security-first leadership role has an immediate focus on cybersecurity, data privacy, governance, risk, and compliance. The VP will build a secure, resilient, well-governed technology environment that can scale with a distributed, field-based workforce across the United States and Europe, while establishing enterprise technology operating standards and discipline. Reporting to the SVP, Technology, the VP will serve as a senior technology partner to the executive team. The role works across Technology, Business Platforms & Intelligence, Legal, HR, Finance, Procurement, Business Enablement & Program Delivery, operating companies, and business leadership to translate risk and business requirements into practical controls, operating standards, and technology priorities. The VP will own the enterprise cybersecurity strategy, roadmap, architecture, and operating model; build and lead governance, risk, compliance, and data privacy programs; and strengthen technology operations and resilience. This includes leading SOC 2 Type I and Type II readiness and examinations, establishing practical information-governance standards, overseeing vendors and managed service providers, improving service health and incident management, and developing business continuity and disaster recovery capabilities. The role combines hands-on operational depth with executive-level judgment. Success includes a documented security, privacy, and technology risk posture; SOC 2 milestones delivered with sustainable evidence and control testing; improved identity, endpoint, access, and data protection; consistent third-party risk oversight; stronger technology service visibility; and tested continuity and resilience plans. The overall objective is to build and operate the technology foundation Overwatch needs to scale securely and reliably without unnecessary complexity or risk.

Requirements

Bachelor's degree in Information Technology, Cybersecurity, Information Systems, Computer Science, or a related field, or equivalent relevant experience.
12 or more years of progressive experience across enterprise technology, cybersecurity, infrastructure, IT operations, GRC, or comparable technology leadership roles.
Significant leadership experience across at least two of cybersecurity, enterprise IT operations, infrastructure, GRC/data privacy, or technology service delivery.
Demonstrated ownership of a cybersecurity and compliance program, including hands-on leadership of SOC 2 and/or ISO 27001.
Working knowledge of data privacy and information governance; U.S. and EMEA experience is relevant to the role.
Deep Microsoft 365 and Entra ID experience, including identity, conditional access, privileged access, endpoint, and data protection controls.
Experience supporting a distributed workforce and managing enterprise technology environments at scale.
Experience owning MSPs, technology vendors, and outsourced service delivery, including SLAs, performance management, escalation, and control oversight.
Practical incident response leadership and ability to communicate effectively with executives and outside parties during a live event.
Ability to establish operational KPIs and use data to manage service reliability, risk, performance, and technology investment.
Strong executive and board communication skills, including the ability to explain technical risk and trade-offs to non-technical audiences.
Experience scaling technology capabilities through significant organizational growth.

Nice To Haves

Prior responsibility spanning both cybersecurity and enterprise IT operations, infrastructure, or end-user technology is strongly preferred.
CISSP, CISM, CCISO, CRISC, CISA, or comparable certifications are valued but not required.
Experience in construction, engineering, staffing, infrastructure, data centers, field services, or another distributed operating environment is a plus.

Responsibilities

Own the enterprise cybersecurity strategy, roadmap, architecture, and security operating model.
Establish identity controls across single sign-on, conditional access, privileged access, employee lifecycle processes, and access recertification.
Drive endpoint security, vulnerability management, encryption, detection, response, and security monitoring across a distributed environment.
Own incident response planning, exercises, escalation, and executive communication during material security events.
Build security awareness and role-based training focused on measurable behavior and risk reduction.
Embed security into systems, integrations, infrastructure, and enterprise AI use cases in partnership with technology and business leaders.
Own the technology policy framework, risk register, control environment, testing calendar, exceptions, remediation, and executive reporting.
Lead SOC 2 Type I and Type II readiness and examinations, including scope, control design, evidence, examiner management, findings, and remediation.
Maintain alignment with applicable frameworks such as NIST CSF, ISO 27001, NIST SP 800-171, or CMMC as business and client requirements evolve.
Build a tiered third-party technology and security risk program and hold managed service providers and vendors accountable for control performance.
Translate client contracts, insurance requirements, and applicable obligations into practical technology controls and ownership.
Report to executives on technology risk, investment trade-offs, control effectiveness, and remediation priorities.
Own the enterprise data privacy program in partnership with Legal, HR, Business Platforms & Intelligence, and business leadership.
Establish standards for data classification, access, handling, retention, sharing, and deletion across enterprise platforms.
Translate applicable U.S. and EMEA privacy requirements into technology controls and operating practices.
Lead privacy-by-design reviews for new systems, integrations, AI use cases, and material changes in data processing.
Establish processes for privacy incidents, third-party data handling, data requests, and cross-border considerations.
Strengthen data governance across collaboration platforms, the data environment, analytics, and AI with data and platform leaders.
Establish operating standards across identity, endpoint management, collaboration platforms, infrastructure, service management, and enterprise technology vendors.
Define and monitor technology service health, incident management, availability, support performance, operational risk, and escalation.
Oversee managed service providers and outsourced technology partners, including service levels, performance, escalation, and accountability.
Drive standardization and automation across employee technology lifecycle processes, including onboarding, offboarding, device management, and access.
Build business continuity, disaster recovery, and technology resilience capabilities for a distributed organization.
Identify opportunities to simplify the technology estate, strengthen controls, improve service, and manage technology cost effectively.
Build a documented security, privacy, and technology risk posture with clear priorities, owners, and remediation plans.
Deliver SOC 2 milestones on plan and establish sustainable evidence and control-testing processes.
Improve identity, endpoint, access, and data protection controls across the enterprise.
Establish a functioning data privacy and information governance program with clear ownership and operating practices.
Operate a consistent tiered third-party risk and vendor oversight model.
Improve visibility into technology service health, incidents, operational risk, and vendor performance.
Establish and exercise business continuity and technology resilience plans.
Provide executives with clearer visibility into technology risk, investment needs, performance, and trade-offs.