Director, IT Security and Infrastructure

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

6 days ago Requisition

Position Summary:

The Director of IT Security is responsible for managing IT infrastructure security, reliability, and efficiency. This role oversees the development, implementation, and enforcement of security policies, procedures, and controls to safeguard sensitive data and ensure compliance with regulatory requirements. The Director of IT Security collaborates across departments to assess risks, respond to incidents, and promote a culture of security awareness. The role oversees user support services including the IT Helpdesk.

Responsibilities/Duties:

• Ensure existing security plans, policies and procedures are consistently followed and updated when necessary
• Develop and enforce security policies, standards, and best practices across all systems and applications.
• Identify, evaluate, and mitigate cybersecurity risks across systems, networks, and data access points
• Oversee incident response planning and execution, including post-incident analysis and reporting
• Ensure compliance with relevant laws, regulations, and standards (e.g., HIPAA, NIST)
• Manage security technologies and tools, including firewalls, intrusion detection systems, and endpoint protection
• Conduct security awareness training and initiatives for employees and contractors (as applicable)
• Collaborate with HMS Compliance team and Executive leadership to align security with business objectives
• Work with the Audit, Risk, and Compliance Committee (ARCC) to monitor and minimize security risk, regulatory compliance, audit support, governance alignment, and incident reporting
• Monitor security metrics and report on security posture, risks, and initiatives to HMS Executive team
• Stay current on cybersecurity trends, technologies, and best practices to enhance security measures proactively
• Implement and manage identity and access management (IAM), endpoint security, and compliance frameworks.
• Conduct regular vulnerability assessments, penetration tests, and risk analysis.
• Oversee the design, implementation, and maintenance of IT infrastructure, including on-premises Active Directory, AWS EC2 Windows servers, and Microsoft 365 environment.
• Manage and optimize network architecture, storage, and virtualization solutions.
• Ensure high availability and performance of internal and external-facing applications hosted on AWS.
• Supervise and mentor IT infrastructure team members.
• Coordinate cross-functional efforts between development, operations, and security teams.
• Drive continuous improvement initiatives for infrastructure and security processes.
• Prepare roadmaps for infrastructure scalability and security maturity.

Specific Knowledge &

Skills:

• Strong understanding of cybersecurity frameworks, risk management, and regulatory compliance
• Expertise in secure software development practices
• Understanding of artificial intelligence and machine learning applications in security
• Ability to lead cross-functional teams
• Excellent communication, analytical, and decision-making skills
• Strategic thinker with hands‑on problem‑solving ability.

Requirements:

• Education:
  • Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field.
• Experience:
  • A minimum of 7 years in IT infrastructure administration and architecture.
  • A minimum of 3 years in a security‑focused role (e.g., Security Engineer, Security Architect, or similar).
  • Experience managing hybrid environments (AWS + on‑prem AD + Microsoft 365).
  • Management experience is required
  • Must be a U.S. Citizen
• Technical
  
  Skills:
  
  
  • Strong knowledge of Windows Server, Active Directory, AWS EC2, and Microsoft 365 administration.
  • Expertise in security frameworks (NIST, ISO 27001, CIS Controls).
  • Familiarity with SIEM, EDR, MFA, and cloud security tools.
• Certifications (Preferred):
  • CISSP, CISM, AWS Certified Security Specialty, Microsoft Certified:
    Security Administrator Associate.
• Must be able to pass a federal background check

Remote.

EOE STATEMENT: Healthcare Management Solutions, LLC has established an Affir Mative Action…