Vice President, Enterprise Infrastructure, Cloud Transformation
Brighton Health Plan Solutions · Westbury, NY
Apply & track with Apply EdgeVice President, Enterprise Infrastructure, Cloud TransformationBrighton Health Plan SolutionsWESTBURY,NYHYBRIDFULL TIME About The RoleThe Vice President of Enterprise Infrastructure, Cloud Transformation is a senior technology executive who leads the enterprise infrastructure strategy, cloud migration roadmap, infrastructure modernization, operational resilience, cybersecurity oversight, and enterprise technology risk management. Reporting directly to the Chief Information Officer (CIO), this executive provides regular updates to the Board of Directors, Audit Committee, and Risk Committee on enterprise infrastructure performance, cloud transformation progress, operational resilience, cybersecurity posture, technology risk, audit readiness, and regulatory compliance.This role is primarily accountable for enterprise infrastructure operations, cloud services, cloud migration, platform reliability, network and technology services, disaster recovery, business continuity, and modernizing core technology platforms. In addition, the executive carries Chief Information Security Officer responsibilities, including cybersecurity strategy, cloud security, regulatory compliance, incident response, identity and access management, and protection of corporate assets, customer information, regulated data, and mission-critical business systems.The executive leads an organization spanning Enterprise Infrastructure, Cloud Services, Infrastructure Engineering, Network Operations, Service Desk, Enterprise Architecture, Technology Operations, Business Continuity, Disaster Recovery, Cloud Security, Cybersecurity, Identity and Access Management, Security Operations, and Governance, Risk & Compliance. The role partners closely with executive leadership, regulators, auditors, customers, and board committees to ensure technology platforms are modern, scalable, secure, compliant, and resilient across the enterprise.Executive ImpactKey ResponsibilitiesExecutive LeadershipServe as a senior technology executive responsible for enterprise infrastructure, cloud transformation, cloud migration, infrastructure engineering, service desk, operational resilience, cybersecurity oversight, technology risk, and regulatory compliance.Advise executive leadership and board committees on cybersecurity threats, emerging technologies, operational risk, cloud transformation initiatives, and regulatory obligations.Establish enterprise infrastructure, cloud, and cybersecurity strategies aligned with organizational objectives, modernization priorities, operational needs, and risk tolerance.Lead executive-level cyber incident response, crisis management, and technology resilience activities.Provide regular board-level reporting on cybersecurity, infrastructure performance, cloud transformation progress, compliance posture, and enterprise risk.Cybersecurity & Risk ManagementOwn enterprise cybersecurity strategy, governance, risk management, and security operations.Maintain accountability for cyber risk management frameworks, policies, standards, and controls.Direct Security Operations, Threat Intelligence, Vulnerability Management, Incident Response, Identity Governance, Security Engineering, and Data Protection programs.Oversee third-party risk management, vendor security assessments, and supply chain security initiatives.Lead enterprise cyber resilience programs and security modernization initiatives.Establish and maintain Zero Trust security principles across enterprise environments.Enterprise Infrastructure & Technology OperationsLead all enterprise infrastructure operations including cloud platforms, data center services, networks, telecommunications, compute, storage, endpoint services, service desk, and enterprise technology platforms.Direct infrastructure engineering and operational excellence programs supporting mission-critical services.Maintain accountability for system availability, capacity planning, operational performance, and technology resilience.Establish long-term enterprise infrastructure strategies that support scalability, modernization, cloud adoption, operational simplification, resiliency, and business growth.Cloud Transformation, Cloud Migration & Platform ModernizationOwn the enterprise cloud migration strategy, roadmap, execution model, governance structure, and operating model across public, private, and hybrid cloud environments.Lead large-scale cloud modernization initiatives involving infrastructure migration, application migration enablement, platform engineering, cloud operations, automation, DevOps enablement, and operational optimization.Establish and maintain enterprise cloud security standards, controls, architectures, and governance frameworks.Direct cloud security architecture, cloud security posture management, workload protection, container security, and cloud-native security operations.Ensure cloud environments meet regulatory, privacy, audit, and customer assurance requirements.Partner with executive leadership to align cloud transformation investments with business objectives, cost optimization goals, operational resilience requirements, modernization priorities, and cybersecurity risk management strategies.Regulatory Compliance, Audit & AssuranceServe as the executive owner for enterprise compliance, audit readiness, and assurance programs.Maintain executive accountability for successful completion of cybersecurity, infrastructure, and operational control audits.Direct the design, implementation, testing, and continuous improvement of internal controls supporting regulatory and compliance obligations.Lead interactions with external auditors, regulators, customers, and executive stakeholders regarding technology risk, cybersecurity controls, and compliance posture.Provide regular audit, compliance, and risk reporting to executive leadership and board committees.Compliance Program ExecutionExecutive owner for SOC 1 and SOC 2 compliance programs, including governance, control effectiveness, audit coordination, remediation management, and annual certification activities.Executive owner for HIPAA Security Rule compliance, ensuring the confidentiality, integrity, and availability of protected health information (PHI).Oversee enterprise-wide risk assessments, control testing, policy governance, and corrective action programs associated with SOC, HIPAA, and related compliance frameworks.Ensure alignment of cybersecurity and infrastructure controls with regulatory requirements, industry standards, contractual obligations, and customer assurance commitments.Maintain accountability for audit findings, management responses, remediation plans, and ongoing compliance monitoring activities.Business Continuity & Operational ResilienceMaintain enterprise-wide business continuity and disaster recovery capabilities.Direct crisis management, incident management, recovery planning, and resilience testing programs.Ensure recovery capabilities meet business and regulatory requirements.Oversee critical infrastructure protection and operational continuity strategies.Financial & Organizational LeadershipManage enterprise technology and cybersecurity operating and capital budgets.Lead a multidisciplinary organization supporting enterprise infrastructure, cloud services, cloud migration, infrastructure engineering, service desk, technology operations, cybersecurity, security operations, and compliance.Oversee strategic technology vendor relationships, managed service providers, and enterprise technology contracts.Drive technology investment strategies, modernization efforts, and operational efficiencies.Scope of ResponsibilityExecutive-Level PositionEnterprise-Wide AccountabilityDirect CIO Reporting on RelationshipRegular Board, Audit Committee, and Risk Committee Presentation creationExecutive Sponsor for Enterprise Infrastructure, Cloud Transformation, Cybersecurity, and Operational Resilience ProgramsPrimary Technology Risk Advisor to Executive Leadership and CommitteesRegulatory Examination OwnershipCritical Enterprise Infrastructure, Cloud Platform, and Technology Operations OversightEnterprise Ownership of SOC 1 and SOC 2 Audit ProgramsExecutive Accountability for HIPAA Security ComplianceRegulatory and Customer Assurance Program LeadershipBoard-Level Audit and Compliance ReportingEnterprise Risk Management and Cyber Resilience LeadershipExecutive Ownership of Enterprise Cloud Migration, Cloud Transformation, and Platform Modernization StrategyAccountability for Multi-Cloud Architecture, Governance, and Operational ExcellenceExecutive Ownership of Cloud Security Strategy, Governance, and Risk ManagementResponsibility for Cloud Security Architecture, Security Engineering, and Secure-by-Design StandardsOversight of Cloud Compliance Programs, Cloud Control Frameworks, and Regulatory ReadinessExecutive Leadership of Zero Trust, Identity Security, and Data Protection Initiatives Across Cloud PlatformsAccountability for Cloud Financial Management, Infrastructure Optimization, Automation, Technology Modernization, and Cloud Operating Model MaturityEnterprise Environment Supporting Approximately 1,000 EmployeesAnnual Technology Budget ResponsibilityEnterprise Technology Vendor and Services Portfolio OversightExecutive Ownership of Business Continuity and Disaster Recovery Programs24x7 Mission-Critical Operations Accountability