VP of Information Systems & Security
Overwatch · Austin, United States
About Overwatch Mission CriticalOverwatch is a service-disabled Veteran-owned small business (SDVOB) certified through the National Veterans Business Development Council (NVBDC), delivering construction professional services, talent acquisition, and general contractor solutions within the mission-critical infrastructure industry. Our focus is the construction and management of state-of-the-art data centers, executed with the precision and reliability this industry demands. From high-end engineers to seasoned field professionals, we deploy the talent needed to bring complex infrastructure to life. At Overwatch, it's more than a job — it's purpose.
The Role
Overwatch Mission Critical is looking for a Vice President of Information Systems & Security to strengthen how we protect, govern, and operate our enterprise technology environment.
This is a security-first technology leadership role with an immediate focus on cybersecurity, data privacy, governance, risk, and compliance.
As Overwatch continues to scale across a distributed, field-based workforce in the United States and Europe, we need a technology environment that is secure, resilient, well governed, and capable of scaling with the business. This role will build the security and privacy foundation while helping establish the operating standards and discipline required across enterprise technology.
The VP will work across Technology, Business Platforms & Intelligence, Legal, HR, Finance, and business leadership to translate risk and business requirements into practical controls, operating standards, and technology priorities.
This role reports to the SVP, Technology and will serve as a senior technology partner to the executive team.
What You Will Own:
Cybersecurity
The immediate mandate is building a practical, scalable security program that protects the enterprise without slowing the business.
You will:- Own the enterprise cybersecurity strategy, roadmap, architecture, and security operating model
- Establish identity as a primary security control plane across single sign-on, conditional access, privileged access, joiner-mover-leaver processes, and access recertification
- Drive endpoint security, vulnerability management, encryption, detection, response, and security monitoring across a distributed environment
- Own incident response planning, exercises, escalation, and executive communication during material security events
- Build security awareness and role-based training focused on measurable behavior and risk reduction
- Partner with technology and business leaders to embed security into systems, integrations, infrastructure, and enterprise AI use cases
Governance, Risk & Compliance
This leader will establish a durable control and risk environment that can support client requirements, growth, and increasing enterprise complexity.
You will:- Own the technology policy framework, risk register, control environment, testing calendar, exceptions, remediation, and executive reporting
- Lead SOC 2 Type I and Type II readiness and examinations end to end, including scope, control design, evidence, examiner management, findings, and remediation
- Maintain alignment to applicable frameworks such as NIST CSF, ISO 27001, NIST SP 800-171, or CMMC as business and client requirements evolve
- Build a tiered third-party technology and security risk program and hold managed service providers and vendors accountable for control performance
- Translate client contracts, insurance requirements, and applicable obligations into practical technology controls and ownership
- Provide clear executive-level reporting on technology risk, investment trade-offs, control effectiveness, and remediation priorities
Data Privacy & Information Governance
Security and privacy must extend to how Overwatch creates, accesses, shares, retains, and uses information across the enterprise.
You will:- Own the enterprise data privacy program in partnership with Legal, HR, Business Platforms & Intelligence, and business leadership
- Establish practical standards for data classification, access, handling, retention, sharing, and deletion across enterprise platforms
- Translate applicable U.S. and EMEA privacy requirements into technology controls and operating practices
- Lead privacy-by-design reviews for new systems, integrations, AI use cases, and material changes in data processing
- Establish processes for privacy incidents, third-party data handling, data requests, and cross-border considerations
- Partner with data and platform leaders to strengthen governance across collaboration platforms, the data environment, analytics, and AI
Technology Operations & Enterprise Resilience
This role will also help strengthen the operating discipline around enterprise technology so the environment remains reliable, scalable, and well controlled as the company grows.
You will:- Partner with technology leadership to establish operating standards across identity, endpoint management, collaboration platforms, infrastructure, service management, and enterprise technology vendors
- Define and monitor technology service health, incident management, availability, support performance, operational risk, and escalation
- Oversee the operating effectiveness of managed service providers and outsourced technology partners, including service levels, performance, escalation, and accountability
- Drive standardization and automation across employee technology lifecycle processes, including onboarding, offboarding, device management, and access
- Build appropriate business continuity, disaster recovery, and technology resilience capabilities for a distributed organization
- Identify opportunities to simplify the technology estate, strengthen controls, improve service, and manage technology cost effectively
How You Will Work:
This role sits at the intersection of security, risk, privacy, and technology operations and requires strong judgment.
You should be comfortable moving from a board-level conversation about cyber risk or privacy into the operating detail of an identity control, vendor issue, incident, or service problem.
You will work closely with leaders across:
- Business Platforms, Data & Intelligence
- Legal and Compliance
- Human Resources
- Finance
- Procurement
- Business Enablement & Program Delivery
- Operating companies
The VP will combine hands-on operating depth with executive-level judgment, building the right controls and capabilities for Overwatch rather than simply applying frameworks.
What Success Looks Like:
Within the first 12 months, we should see measurable evidence that Overwatch has a stronger security, privacy, risk, and technology operating foundation.
Examples include:
- A documented enterprise security, privacy, and technology risk posture with clear priorities, owners, and remediation plans
- SOC 2 milestones delivered on plan with a sustainable evidence and control-testing process in place
- Stronger identity, endpoint, access, and data protection controls across the enterprise
- A functioning data privacy and information governance program with clear ownership and operating practices
- A tiered third-party risk and vendor oversight model operating consistently
- Improved visibility into technology service health, incidents, operational risk, and vendor performance
- Business continuity and technology resilience plans established and exercised
- Clearer executive visibility into technology risk, investment needs, performance, and trade-offs
- A technology operating environment positioned to support continued growth without creating unnecessary complexity or risk
What We Are Looking For
We are looking for a security-first technology operator who can build the capabilities we need today and has the breadth to lead across a growing enterprise technology environment.
The right person will bring:
- Bachelor's degree in Information Technology, Cybersecurity, Information Systems, Computer Science, or a related field, or equivale