About This Role
Leading the company's IT growth and modernization is the core of this Chief Information Officer role, with a focus on Salesforce, Databricks Analytics & Reporting, and CyberSecurity initiatives. Reporting to the CEO, the CIO will own day-to-day IT operations, infrastructure, applications, and cybersecurity across corporate and operating sites. This is a high-visibility, owner-mindset role with access to the CEO, executive team, and PE sponsor, suitable for a hands-on candidate with end-to-end responsibility for running, securing, and improving the company's IT estate.
Responsibilities
- Define and execute a target-state application architecture that consolidates overlapping systems inherited through acquisition, including several CRM platforms, with Salesforce as the designated enterprise CRM
- Lead selection, implementation, and adoption of core enterprise platforms
- Own the Salesforce platform end to end, including data model, account and site hierarchy, product- and opportunity-based workflow, quoting and approvals, reporting, integrations to ERP and the enterprise data platform, and the release, administration, and support discipline required to sustain it
- Drive Salesforce adoption across every service line, office, and acquired brand, migrating remaining commercial activity off inherited CRM platforms so the company operates from a single pipeline of record
- Establish data governance and master data management, particularly customer, account, site, and asset hierarchies spanning tens of thousands of accounts across multiple legacy systems, so that reporting reconciles across brands
- Deliver executive dashboards and self-service reporting for pipeline, backlog, project performance, portfolio megawatts, retention, and margin
- Build, staff, and lead the enterprise cybersecurity function, including the security architecture and security analyst roles currently being established
- Implement a formal security program mapped to a recognized framework such as the NIST Cybersecurity Framework, ISO 27001, or CIS Controls, with a documented maturity baseline and a prioritized remediation roadmap
- Own identity and access management, endpoint and email security, vulnerability and patch management, logging and monitoring, and incident response, including tested playbooks and regular tabletop exercises
- Manage third-party and vendor security risk, and lead responses to client security
- Partner with Engineering, Asset Management, and Commercial leadership to secure and modernize operational technology environments, including SCADA and telemetry platforms, metering, and communications supporting real-time market operations
- Establish network segmentation, remote-access, monitoring, and resilience standards for OT environments while respecting engineering ownership of control system design and configuration
- Ensure the technology supporting the 24/7 network operations center and market-facing scheduling and settlement functions meets availability, redundancy, and recovery requirements appropriate to real-time operations
