About This Role
This IT Director position is the sole technology role within a private family office, responsible for managing all IT systems, cloud infrastructure, and data assets. The Director also safeguards the personal cybersecurity of family members, reporting to senior leadership and collaborating on technology, AI, and cybersecurity strategy. The role requires a methodical and process-oriented individual to champion the office's stringent security posture.
Responsibilities
- Oversee day-to-day technical support from the operations team and vendors
- Set Microsoft 365 groups, shares, and permissions via the vendor
- Set and verify endpoint policies (patching, mobile devices, protection)
- Provide second-tier support for phones, printers, and conference room tech
- Support finance operations, including GL systems and custodian data feeds
- Maintain IT policies, SOPs, and documentation
- Supervise IT/security service providers (contracts, invoicing, SLAs)
- Serve as technical liaison with affiliates, brokers, and custodians
- Identify automation/AI opportunities
- Direct vendor administration of Windows Server/RDS, SQL databases, and M365; verify work
- Maintain networks; verify backups and recovery
- Manage domains, DNS, TLS certificates
- Administer AWS/Azure security aligned with CIS/NIST
- Secure generative AI platforms (access, data handling, governance)
- Lead vulnerability management and penetration testing
- Monitor and respond to security events
- Govern identity/access across AWS and Entra ID; conduct access reviews
- Manage DLP and data classification
- Administer email security (anti-phishing, DMARC/DKIM/SPF)
- Maintain/test incident response and BC plans; lead breach response
- Support family members' personal cybersecurity; deliver security training
- Advise on physical security IT components
Requirements
- 10+ years progressive IT experience, including infosec and infrastructure
- Windows Server, Active Directory, Group Policy, RDS experience
- Working SQL/relational database knowledge
- Vulnerability management tools (Tenable, Qualys)
- Hands-on AWS/Azure security (IAM, logging, monitoring)
- AWS IAM and Entra ID administration, including conditional access
- Familiarity securing enterprise generative AI services
- Managing IT vendors and third-party pen testing
- NIST CSF, CIS Controls, ISO 27001, or SOC 2 knowledge
- Ability to help shape AI/cybersecurity strategy
- Strong communication with non-technical stakeholders