Information Technology Director

Position Summary

The Information Technology (IT) Director provides strategic and operational leadership for a multi-site IT infrastructure, security framework, and service delivery model supporting a 250+ person healthcare organization. Reporting directly to the Chief Operating Officer (COO), this position serves as a senior internal advisor and a critical organizational bridge, integrating secure IT operations with regulatory compliance to deliver a business-enabling technology framework.

The IT Director leads and develops the internal IT management team, optimizes cloud and workplace environments, and oversees relationships with external security advisors, specialized compliance experts, and technical vendors. Serving as the designated HIPAA Privacy Officer, this role works in close partnership with the Clinical Services department to align privacy protocols smoothly with clinical workflows and patient care, while routing complex risk management, insurance, and legal escalations through executive leadership.

• Lead day-to-day multi-site IT operations for a 250-person non-profit healthcare organization, including infrastructure, end-user support, business applications, vendor coordination, and service delivery.
• Manage and develop a team of 6–8 IT staff, setting priorities, monitoring performance, and building a culture of accountability and responsive support.
• Reporting Line:
  Report directly to the Chief Operating Officer (COO) to align technology infrastructure with organizational strategy and operational realities.
• Serve as the senior internal IT leader and trusted advisor to the CEO, COO, and CMO, translating organizational needs into practical technology plans and operational improvements.
• Legal & Executive Escalation:
  Partner with the COO and executive leadership to support information security, risk management, and ongoing policy development, surfacing complex regulatory issues that require escalation to specialized legal counsel or cyber liability brokers.
• Oversee the organization's Google Workspace and Microsoft 360 environments and other cloud technologies, including administration, optimization, access management, and user enablement.
• Serve as the designated HIPAA Privacy Officer, with responsibility for privacy-related policies, workforce privacy training, privacy incident coordination, and support for patient rights processes.
• Clinical Privacy Integration:
  Operationalize the HIPAA Privacy Officer function by collaborating closely with the clinical services department to ensure privacy training, policies, and patient rights processes align with clinical operations.
• Manage relationships with external security advisors, managed service providers, and compliance vendors (including the current vCISO engagement), with the long-term goal of maturing internal capabilities and optimizing external spend.
• Maintain responsibility for infrastructure that supports the organization’s internally-developed applications, including coordination with the Data & Analytics team and contracted software developers on security, access, and infrastructure decisions.
• Establish and maintain clear areas of ownership between IT and the Data & Analytics team for internally-developed application support.
• Partner with the external vCISO, legal counsel, and executive leadership to support information security, HIPAA compliance, California privacy obligations, risk management, incident response coordination, and ongoing policy development.
• Manage privacy-related vendor coordination, including support for Business Associate Agreement processes and third-party accountability in collaboration with legal and compliance stakeholders.
• Develop, maintain, and improve IT and privacy policies, procedures, standards, and documentation appropriate for a regulated healthcare environment.
• Oversee the organization’s device lifecycle management program, including provisioning, patching, mobile device management, and decommissioning.
• Develop and maintain IT disaster recovery and business continuity plans, ensuring critical systems and data can be restored within defined recovery objectives.
• Lead IT budgeting, planning,…