Director, Information Technology and Enterprise AI

Job DetailsJob Location: Remote - Knoxville, TN 37922Travel Percentage: Up to 25%Director, Information Technology and Enterprise AI Location: Remote in Georgia, North or South Carolina, Florida, Tennessee, or Texas About Vehlo We started Vehlo in 2019 with a simple goal: to be the industry’s favorite provider of repair shop technology. Across every part of the auto repair industry, Vehlo is igniting vehicle service success with software and financial solutions that unlock your potential. Our founder-led products power the entire service lane experience and keep customers coming back with streamlined tools that help you handle communication, workflow automation, touchless payments, valet pickup, and much more. We’re out to simplify the customer journey from start to finish and give power back to the people under the hood, making their jobs easier and your shop more profitable —just ask our over 30,000 customers, who generate more than 50M annual repair orders. At Vehlo, our only purpose is your success, and together, we’re reaching your goals faster than ever. Being a Veep comes with more than a comprehensive benefits package—our biggest benefit is opportunity: Opportunity to make an impact, opportunity for growth, and opportunity for recognition and rewards. This is not a mega-corporation where you wonder what people are doing all day - every Veep is moving the ball forward day in, day out for our customers or for each other.  About this role Vehlo is seeking an innovative and visionary Director, Information Technology & Enterprise AI, to lead the next evolution of our technology, security, and AI capabilities. This leader will be responsible for developing and executing a modern enterprise technology strategy that enables business growth, strengthens cybersecurity resilience, improves operational efficiency, and accelerates responsible AI adoption across the organization. Reporting to the Chief Product & Technology Officer (CPTO), the Director will serve as a trusted advisor to executive leadership, translating business objectives into scalable technology solutions while fostering a culture of security, innovation, automation, and continuous improvement. This role requires a strategic thinker who can balance operational excellence with forward-looking technology leadership, ensuring Vehlo remains secure, agile, and positioned to capitalize on emerging technologies. Scope of the AI mandate This role owns Enterprise AI: the platforms, governance, security, spend, and adoption of AI used to run Vehlo’s business, including the enterprise AI assistants deployed across the company. It also owns the AI governance and security framework that applies company-wide. Delivery of AI capabilities inside Vehlo’s products remains with Product and Engineering; this role sets the standards those teams build against, reviews against them, and escalates gaps. What You’ll Do:   Technology Strategy & Leadership Develop and execute a multi-year IT, cybersecurity, and AI roadmap aligned with company growth objectives. Serve as a technology advisor to leadership on emerging technologies, industry trends, cyber risks, and AI opportunities. Lead enterprise technology governance, architecture, standards, and best practices. Drive digital transformation initiatives that improve employee productivity, customer outcomes, and operational scalability. Establish a culture focused on innovation, service excellence, accountability, and business partnership. Lead technology platform integrations for acquired businesses Cybersecurity & Risk Management Own enterprise cybersecurity strategy, risk management, and security operations. Oversee implementation and continuous improvement of security frameworks including NIST CSF, CIS Controls, SOC 2, and other relevant compliance requirements. Lead incident response planning, tabletop exercises, business continuity, and disaster recovery programs. Manage security awareness and training initiatives to strengthen organizational cyber resilience. Partner with internal and external stakeholders to identify, assess, and mitigate cyber risks. Oversee endpoint security, identity and access management, network security, cloud security, threat detection, and vulnerability management. Ensure security-by-design principles are embedded across infrastructure, applications, and AI initiatives. Extend the security program to AI systems: model and vendor risk assessment, data-loss prevention across AI channels, threat modeling for prompt injection and agent misuse, logging and monitoring of AI activity, and incident response procedures that cover AI-specific failure modes. Enterprise AI Strategy & Governance Own the enterprise AI strategy, governance framework, and adoption roadmap for AI used to run Vehlo’s business. Identify opportunities to leverage AI, machine learning, intelligent automation, and generative AI to increase organizational effectiveness and scalability. Partner with business leaders to evaluate and implement AI-enabled solutions that drive measurable business value. Develop and maintain policies and controls for responsible AI use, data protection, risk management, and regulatory compliance, aligned to NIST AI RMF and ISO/IEC 42001 and to evolving AI regulation. Lead role-based AI enablement and change management, with defined adoption targets by function rather than general awareness training. Evaluate emerging AI technologies, rationalize the tool portfolio to avoid overlapping spend, and recommend investments that create competitive advantage. Serve as the governance and security authority for AI across Vehlo, including AI embedded in Vehlo products, without owning product AI delivery. Enterprise AI Platform Operations Administer Vehlo’s enterprise AI platforms (Claude, Microsoft Copilot, and successors): tenant and workspace configuration, SSO and SCIM provisioning, role and permission models, data retention settings, and audit logging. Manage AI licensing and spend: seat allocation and reclamation, plan tiering, API and consumption cost monitoring, showback to business units, and renewal negotiation. Govern the AI integration surface — MCP servers, connectors, plugins, and agent access to enterprise systems — through a defined intake, security review, approval, and periodic recertification process. Define and enforce data boundaries for AI: which classes of Vehlo and customer data may be used with which models, and under which contractual terms for training, retention, and sub-processors, in partnership with Legal, Security, and Product. Manage identity and access for non-human actors: service accounts, agent credentials, least-privilege scoping, activity monitoring, and rapid revocation for AI agents operating in enterprise systems. Detect and remediate unsanctioned AI use, and provide a sanctioned alternative that makes the approved path the easier one. Instrument adoption and value: usage telemetry, adoption and utilization reporting by function, and measured productivity or cost impact against stated targets. Run the enterprise AI evaluation process: structured vendor and model assessment, security and privacy review, pilot design, success criteria, and go/no-go recommendations. Own AI-related responses to customer, auditor, and sponsor diligence, including security questionnaires, AI use disclosures, and control evidence. IT Operations & Infrastructure Ensure reliable, secure, and efficient delivery of enterprise technology services. Lead end-user support, collaboration platforms, endpoint management, and workplace technology services. Oversee Microsoft 365, Slack, Zoom, enterprise AI assistants, identity management, endpoint solutions, and enterprise productivity platforms. Drive infrastructure modernization, cloud optimization, and operational automation initiatives. Partner with cloud and managed service providers to maintain high-performing, cost-effective technology environments. Establish service level objectives (SLOs), performance metrics, and operational KPIs. Cloud & Platform Security Collaborate with AWS, DevOps, and engineering teams to enhance cloud security posture and governance. Establish cloud security architecture standards and monitoring capabilities. Implement security controls, automation, and compliance capabilities across cloud environments. Support secure development practices and DevSecOps initiatives. Financial, Vendor, Facility Management Develop and manage the IT and security budget. Evaluate technology investments and ensure alignment with strategic priorities and ROI objectives. Lead vendor selection, contract negotiations, performance management, and optimization efforts. Identify opportunities to reduce risk, improve efficiency, and optimize technology spend. Own the enterprise AI budget as a distinct line item, with unit economics — cost per active user and cost per workflow automated — and a stated payback expectation. Manage workplace and facilities technology across Vehlo locations, including remote and hybrid offices in the United States and Mexico. People Leadership Build, mentor, and develop high-performing IT and security teams. Foster a culture of continuous learning, innovation, and technical excellence. Establish clear performance expectations and career development opportunities. Lead cross-functional collaboration across technology, product, operations, finance, HR, and business teams. QualificationsWhat You’ll Need: Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, Engineering, or related field. 7+ years of progressive technology leadership experience. 3+ years leading enterprise IT, cybersecurity, or digital transformation programs. Experience developing and implementing cybersecurity frameworks and risk management programs. Experience managing cloud-based environments, preferably AWS and Microsoft ecosystems. Strong understanding of enterprise architecture, infrastructure, networking, endpoint management, and SaaS platforms. Demonstrated experience leading cross-functional initiatives and influencing executive stakeholders. Exceptional communication, leadership, and strategic planning skills. Hands-on experience deploying and administering an enterprise generative AI platform (Claude, Microsoft Copilot, or equivalent) at organizational scale, including tenant administration, access control, data governance settings, and license management. Experience establishing AI governance in an enterprise: acceptable-use policy, tool intake and review, data-use boundaries, and adoption measurement. Experience leading IT and security integration of acquired businesses. Preferred Qualifications: Master's degree in Technology, Cybersecurity, Business Administration, or related discipline. CISSP, CISM, CRISC, CGEIT, Security+, AWS Security Specialty, Microsoft Security certifications, or equivalent credentials. Experience with private equity-backed, SaaS, or multi-entity organizations. Familiarity with SOC 2, ISO 27001, PCI, privacy regulations, and modern governance frameworks. Global experience with operations in Mexico Familiarity with NIST AI RMF, ISO/IEC 42001, the EU AI Act, and emerging US state AI regulation. Experience with agentic AI and non-human identity management.   Note: This job description is intended to outline the general responsibilities and requirements of the role. It is not an exhaustive list of all duties, tasks, or responsibilities that may be required. Responsibilities and priorities may evolve over time, and the company reserves the right to make changes at any time with or without notice. Vehlo is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws. This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. Vehlo makes hiring decisions based solely on qualifications, merit, and business needs at the time.