Director, Information Security and IT

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Luna Physical Therapy

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2018

🏥 Healthcare

💼 Consulting

⚕️ Healthcare Insurance

💰 Series B on 2023-06

Healthcare • Consulting • Healthcare Insurance

Luna Physical Therapy is a pioneering provider of in-home physical therapy services across the United States. With over 3,000 licensed outpatient therapists, Luna offers personalized, expert care directly at patients' homes. The company eliminates the need for clinic visits, making physical therapy more convenient and accessible. Luna's therapists are highly experienced, with many specializing in areas like sports rehab, spinal care, and geriatric therapy. The service is integrated with a user-friendly app for scheduling and exercise management, and it is insurance-friendly, accepting all major insurance plans and Medicare. Luna's commitment to quality care makes it a trusted choice for physical therapy at home.

📋 Description

• Lead Luna's enterprise cybersecurity strategy, roadmap, and security operations across cloud infrastructure, endpoints, business systems, and enterprise applications • Build, mature, and maintain the information security program, including policies, standards, governance, risk management, and security awareness • Lead enterprise IT operations and ensure reliable, secure, and scalable technology services • Own Identity and Access Management, including SSO, MFA, provisioning/deprovisioning, privileged access management, and access reviews • Oversee endpoint management, MDM, device lifecycle, asset management, and enterprise SaaS administration • Lead vulnerability management, threat detection, penetration testing, incident response, disaster recovery, backup, and business continuity planning • Partner with Engineering, Product, Compliance, Legal, Finance, Operations, and People teams on security and technology operations • Ensure compliance with HIPAA, HITECH, and applicable regulatory and security frameworks • Manage third-party security assessments, vendor risk reviews, customer security questionnaires, and technology vendor relationships • Evaluate emerging technologies and recommend secure, scalable solutions • Mentor and develop the IT team while participating in technical execution and architecture decisions • Communicate technology strategy, cybersecurity risks, investment recommendations, and program progress to executive leadership

🎯 Requirements

• 8+ years of progressive experience leading information security, enterprise IT, or blended technology functions • Hands-on ownership of enterprise cybersecurity programs • Success building, implementing, and maturing cybersecurity programs in healthcare or another highly regulated environment • Direct experience supporting healthcare technology environments within HIPAA-regulated organizations • Strong knowledge of HIPAA, HITECH, PHI protection, security governance, risk assessments, audits, and remediation • Hands-on experience with AWS, Azure, or GCP cloud security; IAM; SSO; MFA; endpoint management; MDM; and enterprise infrastructure • Experience leading enterprise IT operations, technology roadmaps, incident response, disaster recovery, business continuity, vulnerability management, and security operations • Ability to lead and mentor technical teams while remaining hands-on in a fast-paced, high-growth environment • Previous Director experience or Senior Manager experience with Director-level scope • Experience partnering with executive leadership on technology strategy, risk, and technical communication • Experience managing third-party vendors, security assessments, customer security questionnaires, and enterprise technology implementations