Sandy Hook Promise (SHP) is a national nonprofit organization with a mission to end school shootings and create a culture change that prevents violence and other harmful acts that hurt children. Through its life-saving, evidence-informed “Know the Signs” prevention programs, SHP educates and empowers youth and adults to recognize, intervene, and get help for individuals who may be socially isolated and/or at risk of hurting themselves or others. Through nonpartisan policy and partnerships, SHP advances gun safety, youth mental health, and violence prevention education at the state and federal levels that protect all children from gun violence in their schools, homes, and communities. SHP is led by several family members whose loved ones were killed in the tragic mass shooting at Sandy Hook Elementary School on December 14, 2012. Make the Promise at www.sandyhookpromise.org.

Director, Infrastructure, Operations, Security & Compliance

About Sandy Hook Promise
Sandy Hook Promise (SHP) is a national nonprofit organization with a mission to end school shootings, and create a culture change that prevents violence and other harmful acts that hurt children. Through its life-saving evidence-informed Know the Signs prevention programs, SHP educates and empowers youth and adults to recognize, intervene, and get help for individuals who may be socially isolated and/or at risk of hurting themselves or others. SHP is a moderate, bipartisan organization that supports sensible policy solutions that address the human side of gun violence and make schools safer.

SHP is led by several family members whose loved ones were killed in the tragic mass shooting at Sandy Hook Elementary School on December 14, 2012.

Commitment to Racial Justice, Equity, Diversity, and Inclusion
SHP strives to ensure its culture and work environment reflects the values of race, diversity, equity, and inclusion (REDI) and is responsive to the views and issues of the diverse communities with which we live and work. SHP encourages individuals who have demonstrated a commitment to equity and inclusion to apply.

About the Role
The Director of Infrastructure, Operations, Security, & Compliance (IO Sec) reports to the VP of Technology and is responsible for overseeing the organization's IT infrastructure, operational processes, cybersecurity, and compliance programs. This role ensures the reliability, scalability, and resilience of technology systems while maintaining compliance with industry regulations and governance policies. The director leads a technical team, collaborates across departments, and implements technology solutions that enhance operational efficiency, strengthen security, and drive continuous improvement in support of the organization's mission.

Location
We are a U.S. based organization and most of our staff work remotely. This role will require 5% travel on an as-needed basis, but rare.

Job Responsibilities Include (but are not limited to):

Strategic Infrastructure and Operations Management

Develop and implement IT infrastructure and security strategies that align with organizational goals and future needs.
Oversee the design, deployment, and maintenance of servers, networks, and cloud environments for scalability and performance.
Manage vendor relationships and IT procurement, ensuring cost-effective agreements and technology lifecycle planning.
Drive innovation through cloud migration, automation, and emerging technologies to enhance efficiency and resilience.

Security Leadership and Risk Management

Develop, enforce, and update security strategies, policies, and controls to mitigate internal and external threats.
Oversee security operations (SOC) and incident response, ensuring swift investigation and resolution of breaches.
Implement proactive threat intelligence and risk mitigation measures to stay ahead of evolving threats.
Define and track cybersecurity KPIs to assess program effectiveness and drive improvements.
Lead cybersecurity awareness training to foster a security-first culture across the organization.

Data Compliance and Privacy

Ensure compliance with industry and education-specific data privacy laws (e.g., ISO 27001, NIST, GDPR, CCPA, HIPAA, FERPA, COPPA, and state regulations).
Develop and enforce IT governance frameworks, risk assessment methodologies, and data protection policies.
Oversee data privacy programs and third-party risk assessments, ensuring alignment with legal and regulatory requirements.
Implement security controls, including encryption, access management, and data loss prevention (DLP), to protect student and organizational data.
Conduct audits, risk assessments, and staff training to strengthen compliance, security awareness, and data protection best practices.

Operational Management and IT Service Delivery

Monitor, maintain, and troubleshoot IT systems, ensuring reliable and efficient service delivery across the organization.
Implement IT service management (ITSM) practices such as incident, problem, change, and asset management.
Establish service level agreements (SLAs) and monitor performance metrics to evaluate the effectiveness and efficiency of IT services.
Ensure seamless use and reliability of communication systems, such as phone systems, video conferencing, and file sharing.
Develop and maintain business continuity and disaster recovery (BCDR) plans, ensuring robust incident response capabilities to minimize downtime and data loss.
Provide guidance and troubleshooting to improve user productivity and satisfaction.

Financial Oversight and Budget Management

Manage the operational budget for infrastructure, security, and compliance, ensuring efficient resource allocation, cost control, and alignment with strategic financial goals set by the VP of Technology.
Lead financial planning for infrastructure, security, and compliance, including expense forecasting, cost optimization, and vendor contract negotiations.
Monitor and optimize spending on cloud and on-premises IT infrastructure, balancing scalability, innovation, and cost-effectiveness.
Identify cost-saving opportunities within infrastructure and security operations while maintaining performance and compliance requirements.

Team Leadership and Development

Lead and manage the associate operations technician, the service management team, and the security and compliance team, ensuring alignment with organizational goals.
Recruit, mentor, and develop IT staff, fostering a collaborative and high-performing work environment.
Establish clear goals and performance expectations, ensuring operational excellence in infrastructure, security, and compliance.
Promote cross-functional collaboration to enhance IT service delivery, security awareness, and compliance effectiveness.

Desired Skills and Experience

Education: Bachelor’s degree in IT, Computer Science, or a related field (master's preferred).
Experience: 10+ years in IT infrastructure, operations, security, and compliance roles, with at least 5 years in leadership capacity at director or above.
Preferred Experience: Prior experience in an educational technology or K-12 school district IT environment is highly desirable. Prior experience working for a nonprofit organization.
Technical Expertise: Strong knowledge of IT infrastructure components, network systems, cloud computing, virtualization, and data center management.
Certifications: Relevant certifications (e.g., CIPP, CISSP, CISM, ITIL, CISA, CCSP) are highly desirable.
Skills: Proven strategic planning and operational management skills, hands-on technical proficiency in systems administration and security operations, and exceptional leadership abilities. Strong knowledge of compliance frameworks, risk management, and IT governance best practices.
A commitment to SHP's vision and values.
Performs other duties as required.

Benefits and Salary Range
The salary range for this position is $93,000-$103,000.
(SHP follows a strict internal rubric to help guide salary placement and ensure equitable pay amongst new hires and current staff. New hires should expect to be brought on at the start of the range, except in extenuating circumstances.)

SHP offers a competitive benefits package, including:
- Unlimited PTO
- Flexible schedules
- Paid holidays and 10 days sick leave
- Paid parental leave
- Health, dental, and vision
- Employer paid life insurance and short- and long-term disability
- 401k match
- Professional development stipend
- Wellness & mental health support
- Employer Paid Employee Assistance Program.

Our organization operates within a distributed workforce, allowing for location flexibility across the country for most positions. We provide remote office support for all staff, which includes a laptop, home office reimbursement, monthly Wi-Fi reimbursement up to $40, and monthly cell phone reimbursement up to $50.

Additional Instructions

Internal applicants have until Monday, March 31, 2025 to submit their application. Please contact HR once you have applied.
All other applicants have until Monday, April 21, 2025 to apply.

Equal Opportunity Employment
SHP is proud to be an equal opportunity employer. We strive to be an employer of choice: where a diverse mix of talented people want to come and do their best work. All applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status, or any other protected characteristic. We are focused on promoting diversity, multiculturalism, and inclusion and believe deeply in having a workforce comprised of people of all beliefs and backgrounds who seek to prevent gun violence and stop the tragic loss of life. Members of all under-represented groups are encouraged to apply.

Director, Infrastructure, Operations, Security & Compliance

Offer summary

Qualifications:

Key responsabilities:

Job description

Required profile

Experience

Hard Skills

Other Skills

Director of Strategy Related jobs

Director of GTM and Business Model Strategy

Associate Director of Strategy, Vault Clinical Ops

Director, Construction

Director of Strategic Programs

Senior Director of Digital Strategy