Director of IT & Information Security (CISO)

Position: Director of IT & Information Security (CISO)
Industry: Investment Management
Location: Boston, MA (Hybrid)
Compensation: $200,000–$250,000 Base + Bonus (depending on experience)
Daley And Associates is seeking candidates for a Director of IT & Information Security position with a growing, Boston-based investment management firm. This individual will oversee the firm's technology infrastructure, cybersecurity, and IT operations while serving as its CISO. The ideal candidate will bring broad technical expertise, strong business judgment, and the ability to manage external providers, lead strategic initiatives, and serve as a trusted technology advisor to executive leadership.

Responsibilities

• Lead the firm's overall IT strategy, infrastructure, cybersecurity, engineering, and technology operations.
• Serve as CISO, overseeing information security policies, risk management, incident response, and regulatory compliance.
• Manage external IT service providers, cybersecurity partners, and technology vendors, ensuring service quality and accountability.
• Oversee Microsoft 365, Azure, Entra ID, Intune, identity and access management, endpoint security, and cloud infrastructure.
• Lead the evaluation, selection, and implementation of enterprise technology solutions, including CRM platforms, AI tools, and workflow automation.
• Oversee technology infrastructure, employee onboarding/offboarding, systems integrations, and IT support escalations.
• Partner with executive leadership to evaluate technology needs, recommend solutions, and establish long-term IT priorities.
• Support cybersecurity and data protection requirements within a regulated investment management environment.

Qualifications

• 6+ years of progressive experience in IT infrastructure, operations, cybersecurity, or related technology functions, including at least 2 years in a leadership capacity.
• Strong technical knowledge of Microsoft 365, Azure, Entra ID, Intune, endpoint security, identity and access management, and cloud technologies.
• Demonstrated experience overseeing cybersecurity initiatives, security controls, risk management, and external service providers.
• Willingness to be "hands-on" required
• Experience managing technology vendors, MSPs, and enterprise systems implementations.
• Familiarity with automation, scripting, and engineering technologies such as PowerShell, Python, SQL, and APIs.
• Financial services or investment management experience strongly preferred, particularly within regulated environments.