Position Summary

The Christian and Missionary Alliance (C&MA) is seeking an experienced Director for Infrastructure & Security. This is a full-time position located in Reynoldsburg, Ohio. This position works under the direction of the AVP for IT and is responsible for providing hands-on technical leadership for the C&MA’s on-premises, cloud, and hybrid infrastructure environments, cybersecurity programs, and IT operations. This role is responsible for leading a team of systems administrators, ensuring the reliability, security, and scalability of the organization’s technology infrastructure — both domestic and international. In the performance of these duties, this position will support the overall mission of the C&MA as described below.

Specific Duties

Infrastructure Strategy & Architecture

• Develop and execute the infrastructure strategy for the C&MA, evaluating on-premises, cloud, and hybrid approaches based on organizational needs, security posture, and financial stewardship
• Design and maintain the organization’s network architecture, including firewalls, switches, VPN, Wi-Fi, and network segmentation across domestic and international locations
• Oversee server and storage infrastructure, including virtualization platforms (Dell VxRail, Nutanix), physical and virtual server environments, and storage systems
• Lead capacity planning for computing, storage, and network resources, ensuring infrastructure scales to meet current and future organizational requirements
• Evaluate emerging infrastructure technologies and make recommendations for adoption aligned with organizational strategy and budget
• Identify, catalog, and prioritize infrastructure technical debt, including aging hardware, out-of-support systems, and legacy configurations; develop remediation plans in coordination with budget planning and strategic priorities

Cybersecurity Program

• Build and mature the organization’s cybersecurity program, establishing policies, standards, and operational practices that protect organizational and constituent data
• Conduct or coordinate vulnerability scanning and penetration testing on a regular cadence
• Develop and maintain incident response plans and lead the response to security incidents
• Implement and manage identity and access management controls, including MFA, conditional access policies, and privileged access management
• Oversee M365 security hardening, including data loss prevention (DLP), endpoint protection, and email security
• Coordinate cybersecurity training and phishing awareness initiatives in partnership with IT Services
• Monitor the threat landscape and communicate risk posture to IT leadership and organizational stakeholders
• Support organizational compliance and data privacy obligations, including donor data privacy, PCI compliance for donation processing, and the heightened data handling requirements for international workers in sensitive and restricted-access contexts where a data breach carries physical safety implications

???????Oper