Bachelor’s degree in information technology, computer science, information systems, or a related field; equivalent professional experience will be considered in place of a degree.
Twelve or more years of progressive information technology experience, including at least five years of IT leadership or management experience with responsibility for technology strategy, budget, and
Working command of information security fundamentals: identity and access management, endpoint protection, vulnerability management, incident response, and security awareness training.
Working familiarity with a recognized security framework such as NIST CSF, CIS Controls, or ISO 27001, and with PCI DSS obligations.
Experience managing external vendors and managed service providers, including contract negotiation and service level accountability.
Experience administering a modern cloud productivity environment, most commonly Microsoft 365, including its security and compliance controls.
Proven ability to explain technical concepts and risk to non-technical staff.
Demonstrated experience leading cross-functional technology projects and guiding organizational change through new system adoption.
Comfort operating as a hands-on practitioner when needed, while remaining accountable for technology outcomes delivered through staff, vendors, and service providers.
Nice to have
Experience in a non-profit organization, professional society, or membership organization with outsourced accounting, development, or other CRM/AMS partners.
Relevant professional certification, for example CISSP, CISM, Security+, PMP, ITIL, or a platform-specific administrator credential.
Experience developing or applying an organizational artificial intelligence policy and evaluating AI-enabled tools.
Full description
Position Description:
CLC is searching for its first Director of Information Technology accountable for the systems, data, and security posture that support CLC. This is a new role designed to set technology strategy in consultation with the leadership teams and be accountable for the technology outcomes that follow, while remaining hands-on where it matters — configuring systems, managing technology vendors and service providers, closing security findings, and ensuring staff have reliable tools and support to perform their work. The Director will report to the Vice President, Operations and Finance and manage the full-time IT administrator.
CLC technology is delivered through a hybrid model of cloud platforms, a managed service provider, and specialist consultants. The Director, in consultation with department heads across the organization, will own this ecosystem end to end: what CLC buys, how it is integrated, what it costs, how it is secured, and whether the organizational benefit was realized.
The right candidate is a translator. They can explain to leadership why an IT investment matters, and in the same afternoon work a broken integration between a system and the email platform through to resolution with the vendor. They are comfortable being the most technical person in the room and the least technical person in a room of vendors.
Key Responsibilities:Technology Strategy and Leadership
Develop and maintain a multi-year technology roadmap aligned to the organization’s strategic plan.
Own the annual IT operating and capital budget; forecast renewals, model total cost of ownership, and present funding requests to the Vice President.
Establish and lead an internal technology governance process for prioritizing requests, approving new systems, and preventing shadow IT.
Define and report on IT service metrics — uptime, ticket resolution, project delivery, and user satisfaction.
Supervise, coach, and develop IT staff where applicable; build technical capability across non-IT staff through training and documentation.
Oversee the IT project and initiative portfolio — prioritize major IT initiatives, plan resources, manage delivery against scope, schedule, and budget, and confirm implementation results.
Own the enterprise business systems portfolio (for example, CRM, finance, HR, and collaboration platforms), including integrations, configuration standards, and named system owners.
Establish data governance practices — data ownership, quality standards, access rules, and retention — in partnership with department heads.
Infrastructure, Operations, and Vendor Management
Manage the organization’s cloud and on-premises infrastructure, including identity and access management, endpoint management, network and Wi-Fi, backup, and disaster recovery.
Own the managed service provider relationship: define the scope of work, hold the MSP accountable to service level agreements, security control requirements, and operational standards; verify controls and track remediation to closure; review performance quarterly, with more frequent operational or security reviews when warranted; and escalate when standards are not met.
Maintain a complete asset and software inventory, including licenses, contract terms, renewal dates, and named business owners for every system.
Lead IT vendor selection and procurement — write requirements, run structured evaluations, collaborate with the General Counsel and finance team to negotiate contracts and pricing, and manage renewals.
Serve as the escalation point for staff technology support, ensuring issues are resolved, and root causes are addressed.
Manage business continuity and disaster recovery planning, including identification of critical business processes, defined recovery time and recovery point objectives, documented coordination with the MSP, and at least annual restoration testing.
Cybersecurity, Risk, and Compliance
Own the organization’s information security program, including written policies, standards, and a regularly reviewed incident response plan that defines roles and coordination across vendors, the MSP, and organizational leadership.
Establish formal cybersecurity governance aligned with a recognized framework such as NIST CSF or CIS Controls, including ongoing security posture management, regular reporting to leadership, and a documented risk acceptance process.
Protect sensitive information — including donor, legal, and staff data — through data classification, access controls, and encryption standards.
Commission and act on periodic risk assessments and penetration or vulnerability testing; maintain a tracked remediation plan with owners and due dates.
Administer identity security controls including multi-factor authentication, least-privilege access, privileged account management, and documented onboarding and offboarding procedures.
Collaborate with the development team to safeguard donor data in accordance with applicable privacy obligations, which may include state privacy statutes, and contractual commitments.
Collaborate with finance team and external accounting partner to ensure compliance for payment channels and processors.
Deliver security awareness training and phishing simulations for all staff and report participation and results to leadership.
Collaborate with VP to manage cyber liability insurance requirements, complete carrier questionnaires accurately, and evaluate the security posture of third-party vendors before contracting.
Digital Transformation and Artificial Intelligence
Identify and prioritize opportunities to automate manual staff processes and improve the digital experience, with a documented business case for each.
Lead the evaluation and adoption of emerging technologies, including AI, with appropriate security, privacy, and organizational controls in place before deployment.
Own the organization’s IT policies, standards, and governance, developed in collaboration with leadership, including artificial intelligence, information security, acceptable use, BYOD, remote access, data handling and retention, third-party risk, and other related IT policies; maintain them on a regular review cycle and monitor compliance and enforcement.
Champion adoption and change management for new systems and enterprise-wide services.
Monitor the organization's technology landscape and advise leadership on emerging platforms, consolidation, and vendor risk.
Qualifications: Required
Bachelor’s degree in information technology, computer science, information systems, or a related field; equivalent professional experience will be considered in place of a degree.
Twelve or more years of progressive information technology experience, including at least five years of IT leadership or management experience with responsibility for technology strategy, budget, and vendor management.
Working command of information security fundamentals: identity and access management, endpoint protection, vulnerability management, incident response, and security awareness training.
Working familiarity with a recognized security framework such as NIST CSF, CIS Controls, or ISO 27001, and with PCI DSS obligations.
Experience managing external vendors and managed service providers, including contract negotiation and service level accountability.
Experience administering a modern cloud productivity environment, most commonly Microsoft 365, including its security and compliance controls.
Proven ability to explain technical concepts and risk to non-technical staff.
Demonstrated experience leading cross-functional technology projects and guiding organizational change through new system adoption.
Comfort operating as a hands-on practitioner when needed, while remaining accountable for technology outcomes delivered through staff, vendors, and service providers.
Preferred
Experience in a non-profit organization, professional society, or membership organization with outsourced accounting, development, or other CRM/AMS partners.
Relevant professional certification, for example CISSP, CISM, Security+, PMP, ITIL, or a platform-specific administrator credential.
Experience developing or applying an organizational artificial intelligence policy and evaluating AI-enabled tools.
Compensation and Benefits
Salary Range: $161,300 - 233,900
Campaign Legal Center is committed to fostering a workplace that supports every team member's personal and professional well-being. Our compensation is competitive and placement within the posted salary range is commensurate with experience. Additionally, we provide a comprehensive and inclusive benefits package tailored to meet the diverse needs of our staff.
Some of our benefits include:
Generous health, dental, and vision insurance with low employee premiums
A 401(k) retirement plan with a dollar-for-dollar match up to 6%, with immediate vesting
16 weeks of fully paid parental leave,10 days of bereavement leave, and 8 weeks of sabbatical leave for those who qualify
Office closures for all federal holidays, plus typically a week in late summer, and a week in the winter.
Flexible Spending and Dependent Care Accounts
A $1,000 annual professional development stipend and bar membership reimbursement
A $500 annual technology allowance
Pre-tax metro smart benefits
New family and family planning support, including reimbursement for travel to access legal reproductive healthcare
An Employee Assistance Program (EAP) with free, confidential support for personal, financial, and family matters.
At CLC, we believe that caring for our team is essential to sustaining our mission. We strive to create a culture where everyone can thrive inside and outside work.
Equal Employment Opportunity Statement
Campaign Legal Center (CLC) is an equal opportunity employer committed to maintaining a nondiscriminatory work environment. CLC is proud to be an inclusive organization. It does not make hiring or advancement, or other employment decisions, based on race, national origin, color, religion, gender, sexual orientation, gender identity or expression, age, marital status, familial status or responsibilities, personal appearance, pregnancy, political affiliation, ancestry, military or veteran status, genetic information, disability, record of arrest or conviction, or any other status protected by applicable federal, state, District of Columbia, or local law. This policy applies to all aspects of employment including, but not limited to, recruitment, selection, job assignment, compensation, promotion, termination, benefits, and training.
Disclaimer: This description of the position summary, key responsibilities, benefits, and compensation is intended to provide an overview of this position and is not all inclusive. The incumbent in this position will be expected to perform other duties as required. Responsibilities may change over time. This description of the position summary, key responsibilities, benefits, and compensation is provided for informational purposes only and does not form the basis of a contract.