Director , Information Security and IT

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Director, Information Security and IT based in United States.

The Director, Information Security and IT will lead the strategy, execution, and continuous advancement of enterprise technology and cybersecurity programs within a fast-growing healthcare environment. This senior leadership role combines strategic ownership with hands-on technical execution across information security, IT operations, infrastructure, and healthcare technology systems. You will strengthen security and resilience across cloud environments, endpoints, applications, and business systems while protecting sensitive healthcare information. The role will also shape identity and access management, technology governance, compliance, incident response, and business continuity capabilities. Working closely with Engineering, Product, Compliance, Legal, Finance, Operations, and executive stakeholders, you will align technology investments with business priorities and patient care needs. You will lead and develop a high-performing IT team while remaining actively involved in architecture, technical decisions, and operational support. This is an opportunity to build scalable, secure technology foundations that enable sustainable growth in a highly regulated healthcare environment.

Accountabilities: Lead the enterprise cybersecurity strategy, roadmap, and security operations, continuously strengthening protection across cloud infrastructure, endpoints, enterprise applications, and business systems.

Build, mature, and maintain a comprehensive information security program covering policies, standards, governance, risk management, security awareness, and operational controls.

Provide technical leadership for enterprise IT operations, ensuring reliable, secure, scalable, and efficient technology services that support business growth and employee productivity.

Own Identity and Access Management capabilities, including SSO, MFA, user provisioning and deprovisioning, privileged access management, and periodic access reviews.

Oversee endpoint management, mobile device management, device lifecycles, technology assets, and enterprise SaaS administration.

Lead vulnerability management, threat detection, penetration testing, incident response, disaster recovery, backup, and business continuity planning.

Partner with Engineering, Product, Compliance, Legal, Finance, Operations, and People teams to integrate security practices into technology and business processes.

Ensure compliance with HIPAA, HITECH, and other applicable regulatory and security frameworks through technical safeguards, documentation, audits, risk assessments, and remediation programs.

Manage third-party security assessments, vendor risk reviews, customer security questionnaires, technology implementations, and ongoing vendor relationships.

Evaluate emerging technologies and recommend secure, scalable solutions that balance business value, risk, cost, and operational effectiveness.

Mentor and develop a high-performing IT team while remaining actively engaged in technical execution, architecture decisions, troubleshooting, and operational leadership.

Communicate technology strategy, cybersecurity risks, investment priorities, and program progress clearly to executive leadership and other stakeholders.

Requirements

8+ years of progressive experience leading information security, enterprise IT, or combined technology functions, including hands-on ownership of cybersecurity programs.

Demonstrated success building, implementing, and maturing cybersecurity programs while balancing security, compliance, operational requirements, and business objectives.

Direct experience supporting healthcare technology environments, including healthcare systems, enterprise applications, and technology platforms within HIPAA-regulated organizations.

Strong understanding of healthcare security and compliance requirements, including HIPAA, HITECH, PHI protection, security governance, risk assessments, audits, and remediation.

Hands-on experience with cloud security across AWS, Azure, or GCP, as well as IAM, SSO, MFA, endpoint management, MDM, and enterprise infrastructure.

Experience leading enterprise IT operations, technology roadmaps, security operations, vulnerability management, incident response, disaster recovery, and business continuity programs.

Proven ability to lead, mentor, and develop technical teams while remaining hands-on with technology execution in a fast-paced, high-growth environment.

Previous experience at Director level or as a Senior Manager operating with comparable scope, ownership, and strategic responsibility.

Experience partnering with executive leadership to develop technology strategy, assess risk, prioritize investments, and communicate complex technical topics to technical and non-technical audiences.

Strong vendor management experience, including third-party security assessments, customer security questionnaires, technology implementations, and enterprise technology relationships.

Strong strategic thinking, technical judgment, communication, problem-solving, and cross-functional collaboration skills.

Ability to balance security requirements with usability, operational efficiency, cost considerations, and business priorities.

Benefits

Opportunity to lead enterprise information security and IT strategy within a technology-enabled healthcare environment.

High-impact leadership role with direct influence over cybersecurity, infrastructure, compliance, and technology operations.

Opportunity to build and mature security and IT programs supporting continued organizational growth.

Close collaboration with executive leadership and cross-functional teams across Engineering, Product, Compliance, Legal, Finance, Operations, and People.

Hands-on leadership environment offering both strategic ownership and technical involvement.

Opportunity to protect sensitive healthcare information and contribute to technology infrastructure that supports high-quality patient care.

Professional growth through leadership of cybersecurity, IT operations, healthcare technology, compliance, and emerging technology initiatives.

Compensation and additional benefits are determined according to the overall employment package and candidate qualifications.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether?    Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.     #LI-CL1