Director, Information Security and IT

atLuna Physical TherapyRemote

United States Full-time Cybersecurity / Security EngineerLead$120k – $170k/year

Posted Aug 10

This is a fully remote position, open to applicants in United States.

📋 Description

• Direct Luna's enterprise cybersecurity strategy, roadmap, and security operations encompassing cloud infrastructure, endpoints, business systems, and enterprise applications.

• Develop, enhance, and sustain the information security program, incorporating policies, standards, governance, risk management, and security awareness initiatives.

• Oversee enterprise IT operations to guarantee dependable, secure, and scalable technology services.

• Manage Identity and Access Management, which includes SSO, MFA, provisioning/deprovisioning, privileged access management, and conducting access reviews.

• Supervise endpoint management, MDM, device lifecycle, asset management, and enterprise SaaS administration.

• Lead efforts in vulnerability management, threat detection, penetration testing, incident response, disaster recovery, backup, and business continuity planning.

• Collaborate with Engineering, Product, Compliance, Legal, Finance, Operations, and People teams on security and technology operations.

• Ensure adherence to HIPAA, HITECH, and relevant regulatory and security frameworks.

• Handle third-party security assessments, vendor risk reviews, customer security questionnaires, and relationships with technology vendors.

• Assess emerging technologies and propose secure, scalable solutions.

• Mentor and cultivate the IT team while engaging in technical execution and architectural decisions.

• Convey technology strategy, cybersecurity risks, investment suggestions, and program updates to executive leadership.

⛳️ Requirements

• At least 8 years of progressive experience in leading information security, enterprise IT, or integrated technology functions.

• Proven hands-on leadership of enterprise cybersecurity programs.

• Demonstrated success in building, implementing, and enhancing cybersecurity programs within healthcare or other highly regulated sectors.

• Direct experience working in healthcare technology environments under HIPAA regulations.

• In-depth understanding of HIPAA, HITECH, PHI protection, security governance, risk assessments, audits, and remediation processes.

• Practical experience with AWS, Azure, or GCP cloud security; IAM; SSO; MFA; endpoint management; MDM; and enterprise infrastructure.

• Background in leading enterprise IT operations, developing technology roadmaps, managing incident response, disaster recovery, business continuity, vulnerability management, and security operations.

• Capability to lead and mentor technical teams while remaining actively involved in a dynamic, high-growth environment.

• Prior experience as a Director or Senior Manager with responsibilities at a Director level.

• Experience collaborating with executive leadership on technology strategy, risk assessment, and technical communication.

• Experience in managing third-party vendors, conducting security assessments, responding to customer security questionnaires, and implementing enterprise technology solutions.