Vice President of Information Security & Infrastructure

About The Opportunity

The Vice President of Information Security & Infrastructure is responsible for leading the organization’s enterprise cybersecurity, infrastructure, cloud operations, technical support, end-user computing, IT compliance, procurement, and asset management functions.

This executive leader serves as the organization’s senior authority for:

• Cybersecurity Strategy
• Cyber Risk Management
• Infrastructure Modernization
• Cloud Transformation
• Regulatory Compliance
• Operational Resiliency
• Secure Enterprise Technology Operations

The role combines the responsibilities of a traditional Chief Information Security Officer (CISO) with leadership over enterprise infrastructure and core IT operational services. This position partners closely with executive leadership, legal, operations, HR, finance, and business leaders to ensure technology platforms and cybersecurity capabilities enable business growth, operational excellence, client trust, and federal compliance readiness.

Cybersecurity & Information Security Leadership

• Lead and mature the enterprise cybersecurity program across all corporate, cloud, and operational environments.
• Develop and execute the organization’s cybersecurity strategy aligned with business objectives, client requirements, and regulatory obligations.
• Serve as the executive leader responsible for cyber risk management, security governance, and enterprise security operations.
• Provide executive and Board-level reporting on cybersecurity posture, risk exposure, incidents, and strategic initiatives.
• Establish and maintain enterprise security policies, standards, procedures, and governance frameworks.
• Lead enterprise incident response, cyber crisis management, and ransomware preparedness programs.
• Oversee security operations including:
  • Threat detection
  • Monitoring
  • Vulnerability management
  • Endpoint security
  • Identity security
  • Third‑party risk management
• Partner with legal, compliance, privacy, and HR teams on cyber governance and investigations.

IT Compliance, CMMC & CUI Responsibilities

• Lead enterprise IT compliance initiatives including:
  • CMMC
  • NIST 800‑171
  • CUI governance
  • Related federal security requirements
• Build and operationalize Controlled Unclassified Information (CUI) enclave environments.
• Define enclave segmentation, governance, access controls, and operational standards.
• Lead organizational readiness for CMMC Level 1 compliance initiatives; experience supporting or preparing for CMMC Level 2 strongly preferred.
• Develop and manage:
  • System Security Plans (SSPs)
  • Plans of Action & Milestones (POA&M)
  • Audit evidence
  • Compliance governance processes
• Partner with federal clients, auditors, and external assessors as needed.
• Ensure proper handling, classification, protection, and retention of CUI and sensitive client information.

Infrastructure & Cloud Leadership

• Provide executive leadership over enterprise infrastructure operations including:
  • Networking
  • Servers
  • Cloud platforms
  • Storage
  • Identity services
  • Enterprise connectivity
• Lead modernization initiatives including migration from on‑premises infrastructure to cloud‑first and hybrid‑cloud architectures.
• Define and execute enterprise cloud strategies across platforms such as:
• Microsoft Azure
• AWS
• Microsoft 365
• and SaaS ecosystems
• Drive Zero Trust and identity‑centric security architecture strategies.
• Oversee infrastructure resilience, disaster recovery, backup, and business continuity programs.
• Ensure scalable and secure infrastructure operations supporting distributed offices, remote workforce, and field operations.

IT Operations Leadership

• Oversee Enterprise Operational Leadership for:
  • IT Infrastructure
  • IT Support / Service Desk
  • End User Computing
  • IT Procurement
  • IT Asset Management
• Lead and mentor IT Directors and operational technology leaders.
• Establish operational KPIs and service management standards.
• Improve IT service delivery and user experience across the enterprise.
• Manage enterprise hardware/software lifecycle governance.
• Drive vendor management, contract management, and strategic procurement optimization.
• Establish mature IT asset lifecycle and governance practices.

Leadership & Strategic Responsibilities

• Partner with executive leadership to align technology and cybersecurity strategies with business objectives.
• Support mergers, acquisitions, integrations, and enterprise growth initiatives.
• Build and lead high‑performing infrastructure and cybersecurity teams.
• Develop multi‑year strategic technology and security roadmaps.
• Manage departmental budgets, technology investments, and operational planning.
• Foster a culture of security awareness, accountability, innovation, and operational excellence.
• Serve as a trusted advisor to leadership, clients, and strategic partners.

Required Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Engineering, or related field.
• 15+ years of progressive IT and cybersecurity leadership experience.
• 7+ years in senior leadership roles managing enterprise infrastructure and cybersecurity organizations.
• Experience within the Architecture, Engineering, and Construction (AEC), Environmental Consulting, Engineering Services, or Federal Contracting industries.
• Demonstrated experience leading enterprise cybersecurity programs in complex distributed environments.
• Hands‑on experience migrating organizations to cloud and hybrid‑cloud environments.
• Demonstrated experience implementing and operationalizing CUI enclave environments.
• Experience supporting or leading CMMC Level 1 initiatives.
• Strong experience with:
  • NIST frameworks
  • Zero Trust architecture
  • Identity and access management
  • Incident response
  • Vulnerability management
  • Enterprise infrastructure operations
• Experience managing enterprise infrastructure teams including:
  • Networking
  • Cloud
  • Servers
  • End‑user computing
  • IT operations
• Strong executive communication and Board presentation capabilities.

Preferred Qualifications

• Experience supporting or preparing organizations for CMMC Level 2 certification.
• Experience with Microsoft GCC or GCC High environments.
• Experience building secure enclave or segmented federal compliance environments.
• Experience supporting geographically distributed organizations and field operations.
• Prior experience integrating cybersecurity into mergers and acquisitions activities.
• Master’s degree preferred.

Preferred Certifications

• CISSP
• CCSP
• CISM
• CMMC Registered Practitioner
• ITIL
• Azure or AWS cloud certifications

Success Characteristics

• Strong executive leadership presence
• Operational and strategic cybersecurity expertise
• Deep infrastructure and cloud modernization knowledge
• Strong understanding of CUI and federal compliance environments
• Ability to balance security with operational enablement
• Strong business acumen and risk‑based decision making
• Collaborative leadership style
• Ability to lead through transformation and organizational growth

About SWCA

We are 100% employee‑owned, and we build our success together. With offices across the United States, SWCA is one of the largest environmental compliance firms and ranks among Engineering News‑Record’s Top 200 Environmental Firms. We offer a supportive, team‑oriented work environment and competitive wages and benefits, including an 100% employee stock ownership plan (retirement). If you need assistance accessing SWCA’s website or require accommodations during the hiring process, please contact View email address on click.appcast.io or call View phone number on click.appcast.io.

SWCA is committed to salary equity and salary transparency. An employee in this US‑based position can expect an annual salary of $212,300.00 to $278,330. Actual pay within this range may depend on experience, qualifications, geographic location, client requirements, and other factors permitted by law. Bonus targets are up to 50% of salary depending on company and individual performance.

EOE – Women, minorities, individuals with disabilities and veterans are encouraged to apply. SWCA celebrates diversity and is committed to creating an inclusive work environment. We strongly encourage candidates from all backgrounds, including those with diverse experiences and veterans, to apply.

SWCA continues to invest deeply in career development programs and recognizes the valuable skills and experiences of internal team members. Qualified internal candidates are encouraged to apply and will be seriously considered.