Director , Information Security and IT

1 month ago
Full-time
Lead
DevOps and Infrastructure
Luna Physical Therapy

Luna Physical Therapy

Luna Physical Therapy is the premier in-home physical therapy platform, providing personalized care covered by insurance. With a focus on geriatrics, orthopedics, and sports medicine, Luna revolutionizes outpatient therapy by offering convenient and sa...

Health Care Providers & Services
251-1K
Founded 2018

Description

  • Lead the enterprise cybersecurity strategy, roadmap, and security operations across cloud, endpoints, business systems, and enterprise applications.
  • Build and maintain the information security program, including policies, standards, governance, risk management, and security awareness initiatives.
  • Own enterprise IT operations and ensure reliable, secure, and scalable technology services.
  • Manage identity and access management, including SSO, MFA, provisioning/deprovisioning, privileged access, and access reviews.
  • Oversee endpoint management, MDM, device lifecycle, asset management, and enterprise SaaS administration.
  • Lead vulnerability management, threat detection, penetration testing, incident response, disaster recovery, backup, and business continuity planning.
  • Partner with Engineering, Product, Compliance, Legal, Finance, Operations, and People teams to embed security into business operations.
  • Ensure compliance with HIPAA, HITECH, and other security frameworks through safeguards, documentation, audits, and remediation.
  • Manage third-party security assessments, vendor risk reviews, customer security questionnaires, and vendor relationships.
  • Mentor and develop the IT team while staying hands-on with technical decisions, architecture, and operational support.

Requirements

  • 8+ years of progressive experience in information security, enterprise IT, or blended technology leadership roles.
  • Hands-on ownership of enterprise cybersecurity programs.
  • Experience building and maturing cybersecurity programs in healthcare or another highly regulated environment.
  • Direct experience supporting healthcare technology systems and HIPAA-regulated organizations.
  • Strong knowledge of HIPAA, HITECH, PHI protection, security governance, risk assessments, audits, and remediation.
  • Hands-on experience with cloud security in AWS, Azure, or GCP.
  • Experience with IAM, SSO, MFA, endpoint management, MDM, and enterprise infrastructure.
  • Experience leading enterprise IT operations, incident response, disaster recovery, business continuity, vulnerability management, and security operations.
  • Prior Director-level experience, or Senior Manager experience with Director-level scope.
  • Experience partnering with executives and communicating technical concepts to technical and non-technical audiences.
  • Experience managing vendors, security assessments, customer security questionnaires, and enterprise technology implementations.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Security Engineer II - IAM

Aledade 1K-5K Health Care Providers & Services

Aledade is seeking a Senior Security Engineer II to secure its enterprise, cloud-native environments, and applications by building scalable, automated security and identity capabilities.

Cybersecurity OAuth OpenID Connect PowerShell Python SAML Terraform
8 hours, 49 minutes ago

Cloud Infrastructure Engineer (Remote LATAM)

Atmosera 51-250 IT Services

Atmosera is seeking a senior Azure Cloud Infrastructure Engineer contractor to design, implement, migrate, and operate secure cloud environments while advising clients and supporting internal operations.

Agile Ansible Azure PowerShell SQL Server Terraform Windows Server
8 hours, 49 minutes ago

Senior Information Systems Security Officer (ISSO)

AGE Solutions 11-50 Internet Software & Services

AGE Solutions is seeking a Senior Information Systems Security Officer (ISSO) to support a DoD customer by leading cybersecurity authorization, risk management, vulnerability management, and continuous monitoring activities.

Cybersecurity Network Security
9 hours, 19 minutes ago

Lead Security Engineer

Canary 11-50 Internet Software & Services

Canary Technologies is seeking a Lead Security Engineer to lead its Security team and own the end-to-end security and compliance program for a global hospitality platform handling guest data and payments.

AWS
9 hours, 19 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers