Chief Information Security Officer (CISO)

Chief Information Security Officer (CISO) and Vice President, IT Infrastructure, Support & Security

The Chief Information Security Officer (CISO) and Vice President, IT Infrastructure, Support & Security is a senior technology executive responsible for the strategic leadership, governance, operational excellence, and continuous improvement of enterprise cybersecurity, cloud infrastructure, technical operations, end-user support, and technology resilience across Mom's Meals.

This role establishes and executes a comprehensive security and infrastructure strategy that protects company assets, member data, business operations, and technology platforms while enabling innovation, scalability, and business growth. As the executive leader responsible for information security, risk management, compliance, cloud infrastructure, technical support, and operational resilience, the CISO ensures that security, reliability, performance, and recoverability are embedded throughout the enterprise technology ecosystem.

Working closely with executive leadership, business stakeholders, legal and compliance teams, operations leaders, and technology partners, this role develops and maintains a secure, highly available, and scalable technology environment built primarily on Microsoft Azure and Microsoft cloud technologies.

Benefits include:

• PTO, holiday pay and holiday of choice
• 401(k) match
• Life insurance
• Short-term disability
• Health, dental and vision insurance
• Maternity/paternity leave
• Health savings account (HSA)
• Flex spending accounts (FSA) – health and dependent

Position Responsibilities may include, but not limited to:

Cybersecurity Leadership & Governance

• Develop and execute the enterprise cybersecurity strategy and multi-year security roadmap
• Establish and maintain information security policies, standards, procedures, and governance frameworks
• Lead cybersecurity risk management, security operations, threat detection, vulnerability management, and security monitoring programs
• Ensure proactive defense against cyber threats and continuously improve the organization's security posture
• Provide regular cybersecurity updates, risk assessments, and strategic recommendations to executive leadership
• Lead enterprise-wide cybersecurity awareness and training programs
• Partner with business and technology leaders to ensure security is integrated into all strategic initiatives and technology investments

Information Security, Risk Management & Compliance

• Ensure compliance with HIPAA, HITRUST, NIST, PCI-DSS, SOC, and other applicable regulatory and security frameworks
• Partner with Legal, Compliance, Internal Audit, and Privacy functions to manage regulatory obligations and enterprise risk
• Oversee security audits, risk assessments, penetration testing, control validation, and remediation activities
• Maintain policies and controls that protect PHI, PII, confidential company information, and critical business systems
• Lead third-party security reviews, vendor risk assessments, and cybersecurity due diligence efforts
• Develop and implement enterprise risk management processes related to cybersecurity and technology operations
• Monitor emerging regulatory requirements and industry best practices to ensure ongoing compliance and program maturity

Infrastructure, Cloud & Platform Operations

• Own the enterprise infrastructure strategy across Microsoft Azure cloud services, networking, endpoint computing, identity management, collaboration platforms, and enterprise technology systems
• Establish standards for reliability, scalability, security, performance, and operational excellence across all technology platforms
• Lead Azure architecture, cloud governance, infrastructure engineering, automation, platform modernization, and technology lifecycle management initiatives
• Ensure Azure-based services and supporting infrastructure align with business growth objectives, security requirements, and operational expectations
• Oversee Microsoft cloud technologies including Azure, Microsoft 365, Entra ID, Intune, Microsoft Defender, and related security and productivity platforms
• Drive platform standardization, cloud optimization, infrastructure resiliency, and cost management initiatives
• Ensure enterprise infrastructure supports cybersecurity, compliance, operational continuity, and disaster recovery requirements
• Establish infrastructure roadmaps that improve reliability, simplify operations, and reduce technology risk

IT Operations & End User Support

• Lead enterprise service management, technical support, help desk operations, and end-user computing services
• Establish service delivery standards, operational KPIs, and customer experience programs that support business productivity
• Drive continuous improvement initiatives that enhance service quality, response times, and user satisfaction
• Ensure appropriate operational processes, controls, and documentation are maintained across all support services
• Develop scalable support models that effectively serve corporate, operational, remote, and field-based employees
• Foster a culture of customer service excellence, accountability, and continuous improvement within the IT organization
• Implement modern service management practices utilizing automation, self-service capabilities, and process optimization

IT/Technical Business Continuity, Disaster Recovery & Operational Resilience

• Own the strategy, governance, and execution of enterprise IT/Technical Business Continuity Planning (BCP) and Disaster Recovery (DR) programs
• Develop, implement, and maintain technology continuity and recovery strategies that safeguard critical business operations and member services
• Establish and govern Recovery Time Objectives (RTOs), Recovery Point Objectives (RPOs), service availability standards, and resilience requirements for all critical technology systems
• Lead disaster recovery planning and recovery strategy development for Microsoft Azure cloud environments, enterprise applications, infrastructure platforms, data services, and networking environments
• Oversee regular disaster recovery testing, technical business continuity exercises, tabletop simulations, failover testing, and recovery validation activities
• Partner with business leaders to ensure technology continuity plans align with enterprise operational continuity requirements
• Develop technology crisis management procedures supporting cybersecurity incidents, cloud service interruptions, infrastructure failures, and operational emergencies
• Ensure resilience, redundancy, backup, recovery, and failover capabilities are designed into all critical Azure and enterprise technology platforms
• Provide executive reporting on continuity readiness, recovery capabilities, testing outcomes, identified risks, and remediation plans

Security Operations & Incident Response

• Lead enterprise incident response, cyber crisis management, and major technology incident response activities
• Establish and maintain security monitoring, detection, investigation, containment, and response capabilities
• Coordinate internal teams, managed security partners, and external stakeholders during cybersecurity incidents
• Ensure timely containment, remediation, communication, and post-incident review processes
• Develop executive reporting and lessons-learned programs following security events and operational incidents
• Collaborate closely with infrastructure and cloud operations teams to ensure incident response, recovery, and resilience capabilities are integrated across Azure and enterprise technology environments
• Continuously improve the organization's cyber defense capabilities through threat intelligence, automation, and operational maturity initiatives

Financial Management & Strategic Vendor Partnerships

• Develop and manage security, infrastructure, cloud, and support operating and capital budgets
• Create business cases and investment strategies supporting technology modernization, security improvements, and infrastructure enhancements
• Establish strong relationships with strategic technology vendors, managed service providers, and cybersecurity partners
• Negotiate contracts, service agreements, and licensing arrangements to maximize business value
• Drive operational efficiencies and cost optimization while maintaining required service levels and security standards
• Monitor vendor performance and ensure contractual obligations are met

Leadership, Talent Development & Organizational Effectiveness

• Build, lead, and develop high-performing teams across cybersecurity, infrastructure, cloud operations, technical support, and IT operations
• Establish clear performance expectations, career development pathways, succession planning, and leadership development programs
• Foster a culture of accountability, collaboration, innovation, security-first thinking, and operational excellence
• Mentor and develop future technology leaders within the organization
• Partner with executive leadership to align technology capabilities with strategic business priorities
• Champion organizational change management and continuous improvement initiatives throughout the technology organization

Required Skills and Experience

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related field
• 12+ years' progressive technology leadership experience
• 5+ years' leadership experience managing cybersecurity, infrastructure, cloud, and/or technology operations teams
• Demonstrated experience leading enterprise cybersecurity programs and technology risk management initiatives
• Strong experience managing Microsoft Azure cloud environments and Microsoft enterprise technologies
• Deep knowledge of cybersecurity frameworks, governance practices, risk management methodologies, and regulatory compliance requirements