We are looking for an experienced Chief Information Security Officer to provide strategic technology and security leadership for a mission-driven nonprofit in Boston, Massachusetts. This Long-term Contract opportunity is ideal for a senior leader who can evaluate current risk exposure, strengthen protection of sensitive donor and client information, and shape a practical roadmap for cybersecurity, data governance, and resilience. The position combines executive-level advisory work with hands-on involvement in infrastructure, disaster recovery planning, and security operations in a Microsoft 365 and Azure-based environment.<br><br>Responsibilities:<br>• Develop a comprehensive security and IT risk strategy aligned with the organization’s mission, operational needs, and compliance expectations.<br>• Assess the current technology landscape and produce a prioritized roadmap covering cybersecurity improvements, data governance, business continuity, and disaster recovery readiness.<br>• Lead gap analyses focused on data protection, incident response, network security, backup practices, and overall resilience against breaches or service disruptions.<br>• Establish and refine policies for information handling, document classification, retention, and archiving to better safeguard confidential legal, community, and donor records.<br>• Partner with leadership, the internal IT manager, and external service providers to strengthen day-to-day security operations and improve oversight of help desk and technology vendors.<br>• Provide senior guidance on protecting cloud and on-premises systems, including Microsoft 365, Azure services, shared file environments, servers, and network infrastructure.<br>• Support planning and execution for critical technology upgrades and security enhancements while minimizing operational risk to the organization.<br>• Advise on incident preparedness by defining response procedures, escalation paths, and recovery approaches for cyber threats, system outages, and data integrity events.<br>• Deliver practical recommendations to executive stakeholders on technology priorities, risk posture, and investments needed to support long-term organizational stability.