Director-IT

About the role

The Director of IT is the single leader accountable for Tideworks’ information technology, reporting to the Chief Financial Officer. This role has two mandates. First, the Director leads the TSA exit and IT separation through the earlier of each service cutover or TSA expiration, with all stand-alone capabilities operational before support ends. The migration and standup of everything Tideworks needs to operate its IT as a stand-alone company, which is now underway. Second, the Director leads Tideworks IT moving forward, building and running a secure, reliable and efficient IT function and partnering with the business to achieve its objectives.

The Director owns corporate IT, end-user computing, cybersecurity, identity and collaboration, infrastructure and networking, service desk, business applications, enterprise integrations, data/reporting platforms, domain/DNS administration, and go-to-market systems. The role also coordinates with the CTO on product-hosting and engineering infrastructure boundaries, including the TSA exit for Lynnwood data center, EDI and TOS hosting. The Director recruits and leads a team of engineers, application and helpdesk staff, and manages the vendors and consultants who support the carve-out. The Director works closely with the CTO and Product Engineering, who own product hosting and engineering infrastructure. The ideal candidate will possess strong leadership and communication skills, a security-first mindset, and hands-on experience hiring and leading an IT organization. This individual will collaborate cross-functionally with the CFO, CTO, Sales Operations, Customer Success, RevOps, HR and Finance to ensure technology enables how Tideworks sells, serves customers and operates.

Responsibilities

IT Strategy, Budget & Leadership

• Own the IT strategy, roadmap and budget for corporate IT, security, business applications and go-to-market systems
• Report status, budget variance and risks to the CFO and Tideworks leadership
• Recruit, onboard and lead the IT team (security, systems, enterprise applications, networking and helpdesk) and set clear roles between engineers, applications and helpdesk
• Set IT policies, standards and access controls, and support audits and customer security reviews (including SOC 2 Type II)
• Own the IT risk register, business continuity and disaster recovery for corporate systems
• Define IT requirements for all new business or system needs

IT Carve-Out & Stand-Alone Transition

• Own the plan, timeline and milestones for moving Tideworks IT from shared services to fully stand-alone operations, including TSA service owners, dependencies, exit criteria, knowledge-transfer requirements, cutover readiness, contingency plans, and the required TSA exit sequence
• Deliver the carve-out across five workstreams:
  • End-user computing and mobile device management: all employee devices, management software, subscriptions and support, including secure wipe and certification of devices at the end of the transition
  • Identity and collaboration: oversee the consultants building a new Microsoft Entra tenant and migrate O365 data and subscriptions, SSO and MFA (email, SharePoint, OneDrive, Teams)
  • Security stack: decide what makes sense for Tideworks and replace shared tools by category (managed detection and response, vulnerability management, privileged access, password management, email security, secure web gateway, data security and insider risk, endpoint security, penetration testing), integrating with Tideworks’ existing firewall and SAST/SCM scanning
  • Office networking and equipment: LAN/WAN, wireless, internet and peripherals, aligned to the office relocation
  • HR, finance and legal software: make sure every back-office need is covered, not necessarily like-for-like, including the application and license inventory and preservation of data and historical records
• Business application transition: establish Tideworks ownership, support, licensing, data retention and operating procedures for all shared and dedicated applications in TSA Appendices 1 and 2, including external website hosting and URL redirects
• Support the ERP migration to NetSuite, which is executed by consultants, by providing identity (IDP, SSO, user provisioning) and security support, including access controls and security review. The Director owns IT-side discovery, access, integration, security, environment, cutover and decommissioning coordination, while Finance and the implementation partner own business design, configuration and financial-data validation
• IFS/TM1 transition: coordinate user and role administration, existing interfaces (EDI, banking, payroll and reporting), IFS REST API credentials and documentation, production data feeds, issue resolution, archival access and orderly decommissioning after NetSuite cutover
• Select, contract and manage IT vendors and consultants, with renewal and spend tracking, and complete current-state, contract end-date and annual-spend inventories
• Stand up the internal helpdesk and ticketing before end-user support moves to Tideworks
• Provide network and security input to the CTO and Engineering team
• TSA governance: act as Tideworks IT service owner, manage Carrix dependencies and escalations, verify separation deliverables, obtain technical documentation and knowledge transfer, and maintain evidence that each service is ready for exit
• Infrastructure transfer: stand up or transition VoIP, Microsoft 365, SharePoint, OneDrive, Teams, LAN/WAN, internet, firewalls, client VPN, identity services, VDI, backup and recovery, mobile/MDM, telephony, domains, DNS and IP address management
• Lynnwood data center / EDI / TOS: jointly with the CTO, define the target-state owner and execute knowledge transfer or migration for facilities, servers, storage, virtualization, databases, networks, backups, disaster recovery, monitoring, patching, vulnerability remediation, EDI processing, trading-partner maps and error remediation

Corporate IT, End-User Computing & Security (Ongoing)

• Operate endpoint, identity and access, patching and vulnerability management, with incident response and breach playbooks
• Oversee the managed detection and response provider, log consolidation, security awareness training and phishing simulations
• Run IT service management, the device lifecycle (procurement, imaging, replacement) and hardware and asset inventory
• Maintain network diagrams, documentation, backup and recovery testing, and scheduled reviews of the security posture
• Establish IT service levels, escalation paths, incident/problem/change management, service metrics and a post-TSA operating calendar for renewals, access reviews, patching, testing and recovery exercises
• Own domain and DNS administration, IP address management, certificate lifecycle, telephony/VoIP and connectivity services

Business Applications (Ongoing)

• Own the HR, finance, legal, compliance and corporate systems and their integrations (banking, payroll, reporting, EDI, APIs and data feeds), including access reviews, change management and release testing
• Maintain the application and license inventory and the vendor relationships behind each system
• Own external corporate website technology, hosting, domains, certificates, redirects and vendor support in partnership with Marketing
• Maintain data-retention, archival, eDiscovery and historical-access requirements for systems and records separated from Carrix
• Lead the Enterprise Application Administrator in supporting ongoing changes and enhancements to enterprise applications after the NetSuite go-live
• Ensure applications are integrated with the Tideworks identity platform for SSO and secure access

Go-To-Market Systems

• Own and administer go-to-market systems (HubSpot, Microsoft Dynamics CRM, Zendesk and related tools), including user provisioning, SSO and security
• Maintain data integrity across CRM, support and marketing systems, and integrations to billing and ERP
• Partner with Sales Operations, Customer Success and RevOps to prioritize and deliver system changes

Business Partnership & Enablement

• Partner with the CFO, CTO, Sales/RevOps, Customer Success, HR and Finance to understand objectives and translate them into technology priorities
• Run an IT intake and prioritization process and keep the IT roadmap tied to business outcomes
• Support customer security questionnaires and customer-facing security reviews
• Maintain a clear boundary with the CTO and Engineering on product hosting, engineering tooling, Lynnwood infrastructure, EDI and TOS environments, with a documented RACI for infrastructure operations, security, identity, business continuity, customer support and vendor management

Qualifications

• Strong leadership and communication skills
• Security-first mindset
• Hands-on experience hiring and leading an IT organization
• Ability to collaborate cross-functionally with CFO, CTO, Sales Operations, Customer Success, RevOps, HR and Finance
• Experience with TSA exits, IT carve-outs, and stand-alone IT transitions
• Expertise in corporate IT, end-user computing, cybersecurity, identity and collaboration, infrastructure and networking, service desk, business applications, enterprise integrations, data/reporting platforms, domain/DNS administration, and go-to-market systems
• Experience coordinating with product engineering on hosting and infrastructure boundaries
• Vendor and consultant management experience
• Knowledge of SOC 2 Type II audits and customer security reviews
• Experience with ERP migrations (NetSuite), identity platforms (Microsoft Entra/SSO/MFA), and security tool stacks (MDR, vulnerability management, PAM, email security, SWG, DLP, endpoint security, penetration testing)