The Chief Information Officer is accountable for the strategy, security, stability, architecture, and performance of ACCC's technology environment. This leader translates business priorities into a disciplined technology roadmap, protects client and organizational data, strengthens the reliability and recoverability of critical systems, and builds an operating model that delivers measurable business value. The CIO leads Information Technology and serves as the senior technology advisor to the Chief Operating Officer, Chief Executive Officer, Executive Leadership Team, and Board as requested. The role requires a hands-on and strategic leader who can stabilize current operations while modernizing legacy platforms, improving delivery discipline, strengthening vendor accountability, and developing a capable technology team. The CIO will establish clear priorities, transparent governance, reliable service levels, and sound controls across infrastructure, applications, data, cybersecurity, support, development, and third-party technology services. This job description does not limit management’s ability to assign or adjust duties and responsibilities at any time. Technology Strategy and Business Alignment • Develop and maintain a multiyear enterprise technology strategy and roadmap aligned with ACCC's mission, operating plan, growth goals, client experience priorities, compliance obligations, and financial capacity. • Convert organizational priorities into a sequenced portfolio of technology investments with clear outcomes, ownership, dependencies, costs, risks, and target dates. • Serve as a trusted executive advisor on technology opportunities, constraints, risk, capacity, and tradeoffs, using plain language and decision ready recommendations. • Partners with Product and Digital, Counseling, Client Support, Disbursements, Marketing, Compliance, Finance, Human Resources, and other business leaders to improve client and employee experiences. • Establish an operating model that protects capacity for stability and security, critical business delivery, and incident response while making competing priorities visible. Operational Stability and Service Management • Own the availability, performance, capacity, and support of business-critical systems, infrastructure, networks, databases, telecommunications, endpoints, cloud services, and integrations. • Implement proactive monitoring, alerting, observability, and service health reporting across the full client journey, including lead intake, counseling, credit report access, enrollment, payments, disbursements, portals, and partner integrations. • Establish service management disciplines for intake, triage, prioritization, escalation, problem management, change management, release management, root cause analysis, and post incident follow through. • Create and maintain current runbooks, system maps, application inventories, ownership records, vendor contacts, escalation paths, and recovery procedures to reduce knowledge concentration and operational dependency. • Define service levels and operational metrics for system availability, incident response, resolution time, change success, support quality, backlog health, and recurring problem reduction.\ Cybersecurity Risk and Compliance • Lead the enterprise cybersecurity program and maintain a practical, risk-based security roadmap appropriate for a national nonprofit financial services organization handling sensitive consumer information. • Partner with Compliance, Risk, Legal, Finance, and external specialists to maintain policies, controls, testing, evidence, remediation plans, and executive reporting for applicable legal, contractual, privacy, payment, and security requirements. • Oversee identity and access management, privileged access, vulnerability management, endpoint protection, security monitoring, penetration testing, secure configuration, data protection, encryption, logging, and security awareness. • Direct preparation for and response to cybersecurity events, technology incidents, vendor failures, and data risks, including timely communication, containment, recovery, documentation, and lessons learned. • Establish governance for artificial intelligence, data use, third party technology, and emerging technologies so innovation occurs within clear security, privacy, compliance, and human oversight boundaries. Business Continuity and Resilience • Own technology disaster recovery, backup integrity, restoration testing, recovery objectives, redundancy, and continuity planning in partnership with business leaders. • Identify single points of failure across people, process, technology, data, and vendors and implement prioritized mitigation plans. • Test recovery procedures and critical vendor contingencies regularly and report readiness, gaps, decisions, and corrective actions to executive leadership. • Ensure critical systems and processes have appropriate monitoring, support coverage, documentation, failover options, and escalation paths. Architecture Applications Data and Integration • Set enterprise architecture standards and guide decisions regarding legacy modernization, cloud services, application platforms, databases, integrations, application programming interfaces, and technical debt. • Maintain a current view of the technology estate, including business criticality, lifecycle status, ownership, dependencies, security posture, cost, supportability, and modernization plans. • Strengthen software development and release practices through documented requirements, design review, source control, testing, segregation of duties, deployment controls, rollback planning, and production validation. • Establish data governance practices that improve data quality, ownership, classification, retention, access, lineage, reporting reliability, and responsible use. • Ensure technical solutions are scalable, maintainable, secure, supportable, and aligned with business architecture and client needs. Techn