If you take pride in building secure, efficient, and impeccably engineered systems, this role will feel like home. As our Director of IT and Compliance, you will guide the architecture, stability, and protection of a modern AWS environment while applying precise logic to maintain SOC 2 and HIPAA compliance. You will troubleshoot complex issues, refine technical controls, and strengthen a company-wide security posture that relies on your accuracy and depth of knowledge. Your leadership will shape reliable infrastructure, disciplined processes, and high-quality operational outcomes that directly support our growth and innovation.
The Mailworks is a woman-owned, family-run business specializing in results-driven direct mail campaigns for a nationwide client base. With 40+ years of experience and over 90 professionals across strategy, design, production, and technology, we combine deep industry knowledge with modern tools to help businesses grow. We produce and deliver over 96 million pieces annually from our in-house facility and are transforming the direct mail space through innovation, service, and our proprietary software platforms.
Reports to: CFO
Hours: 7:00 AM to 3:30 PM.
This position may require availability outside of standard business hours to address critical IT issues.
Work setting: In Office
Supervisory Responsibilities: Oversees IT Technician
Duties:
LMA
- Build a high-performance culture rooted in The Mailworks' core values, ownership, continuous improvement, and recognition.
- Coach and develop direct reports through regular 1:1s, team meetings, mentoring, and clear feedback.
- Manage performance through quarterly reviews, documentation, and accurate Employee Performance Log updates.
- Make or support personnel decisions, including promotions, development plans, corrective action, and terminations.
- Own departmental Rocks, To-Dos, KPIs, and Scorecards, and drive follow-through in weekly L10 meetings.
- Set priorities, delegate effectively, remove blockers, and coordinate across teams to meet deadlines.
- Enforce SOPs, FBA standards, company policies, and applicable compliance requirements while maintaining accurate records.
- Lead hiring, onboarding, training, and offboarding in line with company SOPs and HR standards.
- Drive departmental initiatives tied to company Rocks, growth, performance, and profitability goals.
Infrastructure Management
- Oversee maintenance, security, and scalability of The Mailworks' AWS cloud environment.
- Manage system architecture, backups, storage, and access control for all cloud resources.
- Ensure reliable operation of company servers, virtual machines, and internal applications.
- Collaborate with Development to ensure deployment and infrastructure practices meet security and compliance standards.
- Define standards for workstation setup, patching, and security updates.
- Evaluate and implement infrastructure improvements for stability and efficiency.
- Serve as an escalation point for complex technical issues across systems.
Information Security & Compliance
- Own and maintain The Mailworks' information-security framework, ensuring full SOC 2 and HIPAA compliance.
- Collaborate with Administration and executive leadership to develop, review, and maintain company-wide policies and procedures that support SOC 2, HIPAA, and overall compliance objectives.
- Manage Vanta, third-party auditors, and internal staff to ensure timely task completion, manage documentation, execute evidence collection, and timely remediation.
- Maintain and monitor data-protection policies, encryption standards, secure-transmission practices, and user-access, password, and MFA compliance.
- Conduct regular risk assessments, vulnerability scans, and penetration-test follow-ups.
- Manage incident-response, breach-notification, and disaster-recovery procedures in accordance with HIPAA requirements.
- Lead employee training on data-handling, privacy, and security best practices via informational emails, alerts, and scheduled KnowBe4 training.
Project Management & Strategy
- Plan and execute IT-related projects, upgrades, and integrations.
- Manage vendor relationships for technology services, hardware, and security tools.
- Partner with the CFO on IT budget planning, vendor spend, and cost adherence for all technology investments.
- Advise on best practices that keep AI and emerging-technology deployment paths compliant and free of unnecessary bottlenecks.
- Establish a recurring practice for the IT team to identify and implement automation, efficiency, and cost-saving opportunities.
- Collaborate with other directors to align IT and security strategy with company goals.
- Support business-continuity and disaster-recovery readiness through documented and tested plans.
Documentation & Knowledge Management
- Own the IT collection in the company Knowledge Base, ensuring all systems are fully documented and kept current.
- Maintain runbooks and reference documentation to a standard that allows systems to be supported by more than one person.
- Review and update documentation whenever a system, process, or control changes.
- Direct the IT Technician's contributions to documentation, ensuring updates are accurate and timely.
- Deliver a quarterly changelog audit to the CFO summarizing documentation changes and outstanding gaps.
Required Skills & Abilities
- Strong leadership and communication skills
- Deep expertise in AWS infrastructure, IAM, and security configuration
- Hands-on experience maintaining SOC 2 and HIPAA compliance
- Knowledge of IT systems, networking, endpoint management, and identity-access control
- Familiarity with Vanta or similar compliance-automation platforms
- Excellent analytical and troubleshooting abilities
- High integrity and commitment to data privacy and operational excellence
Physical Requirements
While performing the duties of this job, the employee is regularly required to talk or hear. The employee frequently is required to sit; walk; use hands to finger, handle, or feel; and reach with hands and arms. This position requires that the employee be able to manipulate and transport objects up to 50 pounds.
Success Indicators
- SOC 2 and HIPAA controls maintained, tested, and passed during audit.
- AWS infrastructure remains secure, cost-efficient, and reliable.
- All endpoints, servers, and systems patched, logged, and monitored.
- Technician team resolves IT support requests within SLA targets, maintaining high user satisfaction.
- Documented security incidents resolved with zero recurring issues.
- Effective cross-department collaboration with Development on infrastructure and security needs.
- Automation and efficiency opportunities identified through the recurring team review are evaluated and acted on.
- AI and emerging-technology deployment paths remain compliant and bottleneck-free, per the Director's guidance.
- Knowledge Base is actively kept current without the CFO needing to prompt updates.
Please note that this job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.
Culture Index Survey: https://go.cultureindex.com/p/RtKK3MH9hc8WXz1eFERT
Pay: $100,000.00 - $110,000.00 per year
Benefits:
- 401(k)
- 401(k) matching
- Dental insurance
- Employee assistance program
- Health insurance
- Life insurance
- Paid time off
- Vision insurance
Ability to Commute:
- Menands, NY 12204 (Required)
Work Location: In person
