Position Overview

Job Description

Title:  Director of IT Infrastructure and Firm Security

Description:  The Director of IT Infrastructure and Firm Security is a senior member of the Technology Leadership Team responsible for ensuring the availability, effectiveness and efficiency of our infrastructure technology stack, cyber and physical security and technology risk management across all enterprise platforms. This role involves driving the strategy, architectural design, planning, implementation, maintenance, and support of all infrastructure technologies and risk/security tools and controls across the firm. The Director will foster a culture of focus, continuous improvement, and innovation within this talented technical team.

Responsibilities:

Team and Program:

• Lead a collaborative and supportive team of technical experts and third-party providers (where appropriate) to deliver the security, system availability, and responsiveness of the technology infrastructure.  Partner and collaborate with cross-functional teams to ensure alignment, prioritization and progress on small- and large-scale initiatives.
• Foster a culture of continuous improvement, prioritization, innovation, and proactive problem-solving within the technology infrastructure and security team.
• Outline and manage a team-level product catalog and associated service definitions for our enterprise infrastructure, security and risk services.  Define and manage related service levels, voice of customer and delivery measures.
• Develop and implement a comprehensive strategy and roadmap to eliminate technology and process debt while ensuring the security and uptime of the infrastructure and continued functionality enhancements.
• Establish and monitor key health measures and performance metrics to continuously assess the efficiency and effectiveness of technology infrastructure, security and risk.
• Provide regular program reporting and updates to executive leadership, stakeholders and partners regarding the performance, status, and risk assessment of the technology infrastructure, security and risk initiatives.
• Delivery and expansion of ITIL practices to yield effective operational practices and the ability to produce focused measurement of capacity, volumes and progress.
• Developing and maintaining the IT Infrastructure and Security budget collaborating with stakeholders to align IT spending with business objectives.
• The responsibility of organizational change management is to ensure effective communication and support to end users when infrastructure or security changes occur, ensuring awareness and providing guidance on necessary actions to be taken.
• Ensure team members have individual development plans, clear definitions of ownership and priority and training where needed.

IT Infrastructure and Security:

• Ensure ongoing effective management and evolution of the Infrastructure and Security platform portfolios. Ensure corresponding monitoring is in place for health, activity and performance to enable appropriate system administration, security and incident response.
• Lead the design, testing, implementation and transition to operations for IT Infrastructure platforms and services, leveraging structured delivery and management practices. 
• Lead the design, testing, implementation and transition to operations of risk and security capabilities, protocols and processes to protect the firm’s people, data and technology from potential threats and vulnerabilities. 
• Stay current on industry best practices and emerging technologies to continuously enhance the technology infrastructure and security capabilities.
• Manage vendor relationships and contracts related to technology infrastructure and security, ensuring compliance with service level agreements.
• Lead team to create and be well-versed in proactive readiness and reactive recovery / response procedures to increase our ability for rapid and safe recovery in emergencies.  Leadership of annual execution of the Disaster Recovery Plan for both cloud and on-premise technology.
• Implement risk-based physical security program and practices applicable to the HW facility and personnel risk profile