Responsibilities
- Manage full lifecycle IT operations, including device management, user provisioning, SaaS administration, identity systems, help desk support, and office technology infrastructure globally.
- Oversee technical compliance with HIPAA and HITECH requirements by implementing encryption, SIEM solutions, mobile device management, endpoint detection, and role-based access controls.
- Lead the organization's security program, including coordinating penetration tests, defining security policies, conducting incident response drills, evaluating third-party vendors, and managing breach response.
- Govern the enterprise use of AI tools, covering licensing, cost management, API key controls, data protection policies, and defenses against prompt injection, while promoting AI best practices company-wide.
- Manage the company’s SaaS ecosystem, including contract renewals, license efficiency, and negotiations with key platform providers.
- Advance identity governance and automation through tools like Okta, SCIM provisioning, role-based access frameworks, and integrated workflows.
- Lead, mentor, and scale the IT and security team, manage external CISO partnerships, oversee budget planning, and align team structure with business needs.
- Maintain comprehensive IT documentation and improve operational processes, including runbooks, onboarding, offboarding, and incident workflows, with a focus on automation.
- Oversee global physical IT infrastructure, including networking, wireless systems, audiovisual equipment, and access control across multiple office locations.
- Act as a trusted point of contact for high-sensitivity issues, including executive access, security breaches, and legal data preservation requests.
- Provide regular reporting to executive leadership, clearly communicating progress, risks, strategic priorities, and incident status in business-relevant terms.
