Director , Information Security and IT

3 weeks, 4 days ago
Full-time
Lead
DevOps and Infrastructure
Luna Physical Therapy

Luna Physical Therapy

Luna Physical Therapy is the premier in-home physical therapy platform, providing personalized care covered by insurance. With a focus on geriatrics, orthopedics, and sports medicine, Luna revolutionizes outpatient therapy by offering convenient and sa...

Health Care Providers & Services
251-1K
Founded 2018

Description

  • Lead the enterprise cybersecurity strategy, roadmap, and security operations across cloud, endpoints, business systems, and enterprise applications.
  • Build and maintain the information security program, including policies, standards, governance, risk management, and security awareness initiatives.
  • Own enterprise IT operations and ensure reliable, secure, and scalable technology services.
  • Manage identity and access management, including SSO, MFA, provisioning/deprovisioning, privileged access, and access reviews.
  • Oversee endpoint management, MDM, device lifecycle, asset management, and enterprise SaaS administration.
  • Lead vulnerability management, threat detection, penetration testing, incident response, disaster recovery, backup, and business continuity planning.
  • Partner with Engineering, Product, Compliance, Legal, Finance, Operations, and People teams to embed security into business operations.
  • Ensure compliance with HIPAA, HITECH, and other security frameworks through safeguards, documentation, audits, and remediation.
  • Manage third-party security assessments, vendor risk reviews, customer security questionnaires, and vendor relationships.
  • Mentor and develop the IT team while staying hands-on with technical decisions, architecture, and operational support.

Requirements

  • 8+ years of progressive experience in information security, enterprise IT, or blended technology leadership roles.
  • Hands-on ownership of enterprise cybersecurity programs.
  • Experience building and maturing cybersecurity programs in healthcare or another highly regulated environment.
  • Direct experience supporting healthcare technology systems and HIPAA-regulated organizations.
  • Strong knowledge of HIPAA, HITECH, PHI protection, security governance, risk assessments, audits, and remediation.
  • Hands-on experience with cloud security in AWS, Azure, or GCP.
  • Experience with IAM, SSO, MFA, endpoint management, MDM, and enterprise infrastructure.
  • Experience leading enterprise IT operations, incident response, disaster recovery, business continuity, vulnerability management, and security operations.
  • Prior Director-level experience, or Senior Manager experience with Director-level scope.
  • Experience partnering with executives and communicating technical concepts to technical and non-technical audiences.
  • Experience managing vendors, security assessments, customer security questionnaires, and enterprise technology implementations.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Infrastructure Engineer, SRE

Rocket Money 51-250 Diversified Financial Services

Rocket Money is hiring a Senior Infrastructure Engineer, SRE to evolve the reliability, observability, disaster recovery, and operational practices supporting its large-scale financial services platform.

Datadog Go Python Terraform TypeScript
8 hours, 58 minutes ago

Principal Cloud Security Engineer

LastPass 251-1K IT Services

LastPass is seeking a Principal Cloud Security Engineer to partner with engineering, DevOps, CI/CD, architecture, and trust teams to embed secure-by-design practices across its cloud infrastructure and products.

AWS AWS CDK Docker Git GitLab GitLab CI Kubernetes LLM TCP/IP Terraform TLS
9 hours, 13 minutes ago

Technical Lead Chief Security Architect / Engineer

9th Way Insignia 51-250 Internet Software & Services

9th Way Insignia is hiring a Hybrid Manager/Technical Lead Chief Security Architect/Engineer to provide senior cybersecurity architecture and engineering leadership for a federal Department of Veterans Affairs program, strengthening enterprise security and protecting critical systems and information.

Cybersecurity DevSecOps Encryption HIPAA
9 hours, 28 minutes ago

Senior Information Security Engineer

eMoney Advisor 251-1K Capital Markets

The Information Security Engineer at eMoney Advisor manages and strengthens the security operations of a 24x7x365 wealth-management technology infrastructure to protect the confidentiality, integrity, and availability of company data.

AWS Encryption Network Security Penetration Testing
9 hours, 42 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers