Director, IT & Security

Overview

The Director of IT is responsible for the day-to-day management and operational excellence of the company’s technological environment - applications, infrastructure, systems, cloud, and operational security controls. This role translates the enterprise IT strategy into executable roadmaps and delivers reliable, secure, and cost‑effective technology services aligned to business objectives, while supporting business continuity and user experience. The Director will lead IT operations, project execution, vendor management, and team development, while working closely with the VP, IT & Security to align with broader strategic goals. This role requires a strong background in information technology, excellent leadership and communication skills, and a bias for action. Experience in managing teams, budgets, and a track record of delivering IT initiatives is essential for this position. A significant level of independent thought and action, based on extensive experience and sound judgment, is used to fulfill the position’s requirements.

Responsibilities

- Lead the planning, implementation, and maintenance of IT systems, including networks, servers, enterprise applications, and end‑user platforms; ensure availability, capacity, and performance standards are met.

- Maintain infrastructure standards and lifecycle plans to support scalability and reliability.

- Manage IT service delivery, including SLAs/OLAs, service metrics dashboards, and continuous improvement initiatives.

- Oversee ITIL processes: change/release management, incident/problem management, and on‑call practices; drive root‑cause analysis and corrective actions.

- Translate enterprise strategy into annual operating plans and roadmaps; prioritize backlog with business stakeholders and deliver projects on time and within budget.

- Manage IT projects, timelines, and budgets in alignment with business priorities.

- Collaborate with business units to understand technological needs and deliver effective solutions.

- Administer technology contracts and SOWs; manage vendor performance and evaluate third‑party solutions.

- Operate within technical security controls (identity, endpoint, patching, vulnerability remediation) and respond to incidents per established runbooks; coordinate investigations and post‑incident reviews in partnership with Security.

- Execute control activities, produce audit evidence, and address remediation tasks to meet regulatory and industry standards.

- Develop and maintain disaster recovery and business continuity plans; ensure readiness through testing and corrective actions.

- Support compliance with IT‑related regulatory and audit requirements; ensure adherence to relevant regulations, standards, and best practices.

- Prepare and present operational reports (SLAs, risk/incident summaries, DR readiness, cost and capacity trends) and security/risk assessments for leadership.

- Recruit, onboard, and mentor IT staff; conduct performance evaluations, provide guidance for professional growth, and foster a culture of collaboration and continuous improvement.

- Drive innovation and digital transformation initiatives where applicable.

- Perform other duties as assigned.

Qualifications

Minimum:

- Bachelor’s degree in computer science, IT, or a related field.

- 8+ years’ experience in IT management, security operations, or related role.

- Proven experience operating enterprise networks, systems, and security measures; strong incident and problem management skills.

- Demonstrated ability to manage budgets and deliver projects within constraints, strong vendor management skills.

- Clear, concise communication skills to interact with stakeholders and cross‑functional teams; strong analytical/problem‑solving capabilities.

- Demonstrated leadership in implementing and managing IT systems and services, with an ability to execute.

- Demonstrated ability to lead and manage a diverse team of IT professionals.

- Strong understanding of network architecture, enterprise applications, and cloud services.

- Understanding of regulatory compliance standards and best practices in information security.

- Ability to make sound decisions under pressure and in critical situations.

- An ability to embrace change, adapt quickly, and influence change.

Preferred:

- Master’s degree or relevant certifications (e.g., PMP, ITIL, Microsoft, Cisco) preferred.

- Knowledge of the energy industry or utilities sector with emphasis on natural gas transmission.