Vice President, Enterprise Infrastructure, Cloud Transformation (Westbury)

Vice President, Enterprise Infrastructure, Cloud Transformation

Brighton Health Plan Solutions

WESTBURY,NY

HYBRID

FULL TIME

About The Role

The Vice President of Enterprise Infrastructure, Cloud Transformation is a senior technology executive who leads the enterprise infrastructure strategy, cloud migration roadmap, infrastructure modernization, operational resilience, cybersecurity oversight, and enterprise technology risk management. Reporting directly to the Chief Information Officer (CIO), this executive provides regular updates to the Board of Directors, Audit Committee, and Risk Committee on enterprise infrastructure performance, cloud transformation progress, operational resilience, cybersecurity posture, technology risk, audit readiness, and regulatory compliance.

This role is primarily accountable for enterprise infrastructure operations, cloud services, cloud migration, platform reliability, network and technology services, disaster recovery, business continuity, and modernizing core technology platforms. In addition, the executive carries Chief Information Security Officer responsibilities, including cybersecurity strategy, cloud security, regulatory compliance, incident response, identity and access management, and protection of corporate assets, customer information, regulated data, and mission-critical business systems.

The executive leads an organization spanning Enterprise Infrastructure, Cloud Services, Infrastructure Engineering, Network Operations, Service Desk, Enterprise Architecture, Technology Operations, Business Continuity, Disaster Recovery, Cloud Security, Cybersecurity, Identity and Access Management, Security Operations, and Governance, Risk & Compliance. The role partners closely with executive leadership, regulators, auditors, customers, and board committees to ensure technology platforms are modern, scalable, secure, compliant, and resilient across the enterprise.

Executive Impact

Key Responsibilities

Executive Leadership

• Serve as a senior technology executive responsible for enterprise infrastructure, cloud transformation, cloud migration, infrastructure engineering, service desk, operational resilience, cybersecurity oversight, technology risk, and regulatory compliance.
• Advise executive leadership and board committees on cybersecurity threats, emerging technologies, operational risk, cloud transformation initiatives, and regulatory obligations.
• Establish enterprise infrastructure, cloud, and cybersecurity strategies aligned with organizational objectives, modernization priorities, operational needs, and risk tolerance.
• Lead executive-level cyber incident response, crisis management, and technology resilience activities.
• Provide regular board-level reporting on cybersecurity, infrastructure performance, cloud transformation progress, compliance posture, and enterprise risk.

Cybersecurity & Risk Management

• Own enterprise cybersecurity strategy, governance, risk management, and security operations.
• Maintain accountability for cyber risk management frameworks, policies, standards, and controls.
• Direct Security Operations, Threat Intelligence, Vulnerability Management, Incident Response, Identity Governance, Security Engineering, and Data Protection programs.
• Oversee third-party risk management, vendor security assessments, and supply chain security initiatives.
• Lead enterprise cyber resilience programs and security modernization initiatives.
• Establish and maintain Zero Trust security principles across enterprise environments.

Enterprise Infrastructure & Technology Operations

• Lead all enterprise infrastructure operations including cloud platforms, data center services, networks, telecommunications, compute, storage, endpoint services, service desk, and enterprise technology platforms.
• Direct infrastructure engineering and operational excellence programs supporting mission-critical services.
• Maintain accountability for system availability, capacity planning, operational performance, and technology resilience.
• Establish long-term enterprise infrastructure strategies that support scalability, modernization, cloud adoption, operational simplification, resiliency, and business growth.

Cloud Transformation, Cloud Migration & Platform Modernization

• Own the enterprise cloud migration strategy, roadmap, execution model, governance structure, and operating model across public, private, and hybrid cloud environments.
• Lead large-scale cloud modernization initiatives involving infrastructure migration, application migration enablement, platform engineering, cloud operations, automation, DevOps enablement, and operational optimization.
• Establish and maintain enterprise cloud security standards, controls, architectures, and governance frameworks.
• Direct cloud security architecture, cloud security posture management, workload protection, container security, and cloud-native security operations.
• Ensure cloud environments meet regulatory, privacy, audit, and customer assurance requirements.
• Partner with executive leadership to align cloud transformation investments with business objectives, cost optimization goals, operational resilience requirements, modernization priorities, and cybersecurity risk management strategies.

Regulatory Compliance, Audit & Assurance

• Serve as the executive owner for enterprise compliance, audit readiness, and assurance programs.
• Maintain executive accountability for successful completion of cybersecurity, infrastructure, and operational control audits.
• Direct the design, implementation, testing, and continuous improvement of internal controls supporting regulatory and compliance obligations.
• Lead interactions with external auditors, regulators, customers, and executive stakeholders regarding technology risk, cybersecurity controls, and compliance posture.
• Provide regular audit, compliance, and risk reporting to executive leadership and board committees.

Compliance Program Execution

• Executive owner for SOC 1 and SOC 2 compliance programs, including governance, control effectiveness, audit coordination, remediation management, and annual certification activities.
• Executive owner for HIPAA Security Rule compliance, ensuring the confidentiality, integrity, and availability of protected health information (PHI).
• Oversee enterprise-wide risk assessments, control testing, policy governance, and corrective action programs associated with SOC, HIPAA, and related compliance frameworks.
• Ensure alignment of cybersecurity and infrastructure controls with regulatory requirements, industry standards, contractual obligations, and customer assurance commitments.
• Maintain accountability for audit findings, management responses, remediation plans, and ongoing compliance monitoring activities.

Business Continuity & Operational Resilience

• Maintain enterprise-wide business continuity and disaster recovery capabilities.
• Direct crisis management, incident management, recovery planning, and resilience testing programs.
• Ensure recovery capabilities meet business and regulatory requirements.
• Oversee critical infrastructure protection and operational continuity strategies.

Financial & Organizational Leadership

• Manage enterprise technology and cybersecurity operating and capital budgets.
• Lead a multidisciplinary organization supporting enterprise infrastructure, cloud services, cloud migration, infrastructure engineering, service desk, technology operations, cybersecurity, security operations, and compliance.
• Oversee strategic technology vendor relationships, managed service providers, and enterprise technology contracts.
• Drive technology investment strategies, modernization efforts, and operational efficiencies.

Scope of Responsibility

• Executive-Level Position
• Enterprise-Wide Accountability
• Direct CIO Reporting on Relationship
• Regular Board, Audit Committee, and Risk Committee Presentation creation
• Executive Sponsor for Enterprise Infrastructure, Cloud Transformation, Cybersecurity, and Operational Resilience Programs
• Primary Technology Risk Advisor to Executive Leadership and Committees
• Regulatory Examination Ownership
• Critical Enterprise Infrastructure, Cloud Platform, and Technology Operations Oversight
• Enterprise Ownership of SOC 1 and SOC 2 Audit Programs
• Executive Accountability for HIPAA Security Compliance
• Regulatory and Customer Assurance Program Leadership
• Board-Level Audit and Compliance Reporting
• Enterprise Risk Management and Cyber Resilience Leadership
• Executive Ownership of Enterprise Cloud Migration, Cloud Transformation, and Platform Modernization Strategy
• Accountability for Multi-Cloud Architecture, Governance, and Operational Excellence
• Executive Ownership of Cloud Security Strategy, Governance, and Risk Management
• Responsibility for Cloud Security Architecture, Security Engineering, and Secure-by-Design Standards
• Oversight of Cloud Compliance Programs, Cloud Control Frameworks, and Regulatory Readiness
• Executive Leadership of Zero Trust, Identity Security, and Data Protection Initiatives Across Cloud Platforms
• Accou