Director of Technology & Information Security

Director of Technology & Information Security

Chapa De Indian Health

DEPARTMENT: Information Technology

SUPERVISOR: Chief Information Officer

SUPERVISES: IT Operations Manager, Clinical Application Supervisor

CLASSIFICATION: Exempt

Position Summary

The Director of Technology & Information Security is a senior technology leader responsible for the strategic direction, architecture, and governance of Chapa-De Indian Health's technology environment. The Director operates at the strategic and organizational layer: setting direction, managing vendors, and MSP relationships, owning the management of data governance and information security programs, and leading major technology initiatives. This role ensures that the IT Operations and Clinical Application teams have the leadership, resources and clarity to execute effectively - and serves as a bridge between technology capability and organizational mission.

Specific Responsibilities

Technology Infrastructure:

• Oversee the procurement, deployment, and maintenance of hardware, software, and network infrastructure.
• Oversee computer operations for the agency's information system, including local area networks, wide-area networks, and electronic health applications.
• Manage daily operations of Enterprise Hardware (networking, desktop support, audio visual support, contact center, telecommunications) and IT Help Desk.
• Ensure continuous delivery of technical services through oversight of service level agreements and monitoring of systems, programs, and equipment performance.
• Oversee the design, implementation, and evaluation of the systems that support end users in the productive use of computer hardware and software.
• 7. Manage IT budgets and resource allocation.
  
  

Develop and maintain the systems architecture, defining standards and protocols for data exchange, communications, software and interconnection of agency information systems.

• Define requirements for new technology implementations and communicate them as appropriate.
• Ensure optimal performance and reliability of IT systems and applications.
• Own the MSP relationship for Tier 3 infrastructure support: negotiate contracts, define scope, set performance expectations, and hold the MSP accountable to SLAs.
• Operationalize IT strategy with organizational business and clinical objectives.
• Suggests and implements new technology to improve efficiency, productivity, and overall experience for patients and employees.
• Monitor IT projects and initiatives, including system upgrades and implementations.
• Oversee vendor selection and management for outsourced IT services.
• Ensure system configuration is optimized for data capture, retrieval and transmission, identified in coordination with the Director of Data.
• Ensure availability and functionality of the electronic health record, guiding upgrades and integration to optimize performance.
• In coordination with the Learning and Development team and the Director of Data, develop electronic record application training to support optimal use of the system and accurate capture of necessary data.
• Demonstrate leadership and judgement when collaborating with other leaders in establishing priorities.
• Oversee the development and execution of end-user training programs to improve IT literacy and security awareness.
  
  

Information Security

• Develop and implement a comprehensive information security strategy and threat management, including oversight of policies, procedures, and standards.
• Oversee the planning, implementation, and execution of security standards and procedures to ensure system security compliance.
• Lead identity and access management, including zero-trust architecture adoption and privileged access governance.
• Oversee security operations in coordination with the IT Operations Manager and MSP: SIEM monitoring, EDR, email security, and network segmentation.
• Oversee the development, scheduling, planning, testing and communication of the IT Disaster Recovery Plan and back up procedures.
• Manage IT risk assessments, audits, and security incident investigations.
• Stay informed about emerging threats and vulnerabilities and implement proactive measures as needed.
• Govern Microsoft Defender suite deployment across endpoints, email, and cloud workloads.
• Collaborate with other departments to identify and mitigate security risks.
• Build trust and respect for information security across the organization through effective communication, education and advocacy.
• Expand employee awareness of security risks and mitigation strategies.
• Maintain awareness of tribal data sovereignty considerations and apply appropriate safeguards in all data governance decisions.
  
  

Regulatory Oversight

• Ensure that all information systems, applications and networks operate according to internal standards, external accrediting agency standards, regulatory agencies and legal requirements, including HIPAA and Federal Bureau of Investigation (FBI) Livescan program requirements.
• Maintain awareness of existing and emerging technologies, regulatory updates, and market factors and assist in the development of the IT strategy, plan and compliance.
• Establish, implement and maintain architecture documentation, policies, procedures, systems and standards as required to comply with regulatory agencies.
• Serve as designated Local Agency Security Officer for Chapa-De Indian Health's Live Scan fingerprint background check.
  
  

Other

• Directly supervise the IT Operations Manager and Clinical Application Supervisor; provide clear direction, accountability, and support to enable their teams to operate effectively.
• Foster a culture of innovation and continuous improvement.
• Communicate priorities, goals, standards, and updates to staff in a timely and professional manner.
• Act as an effective advocate for teamwork and knowledge sharing amongst various stakeholders.
• Work with the CIO and key members of leadership to define objectives for technology initiatives and analysis of impacts.
• Stay current on industry trends and emerging technologies.
• Work with Learning & Development team to build and execute a training plan for employee skillset development supporting high performing teams.
• Promptly address and resolve disruptive team dynamics in a manner that reflects CDIH values.
• Foster a positive work environment focused on "team-based" care and Chapa-De mission, vision and values.
• Participate in the talent acquisition process.
• May be assigned to other CDIH clinics based on agency needs.
  
  

Minimum Qualifications

• 8-10 years' progressively responsible IT leadership experience in a healthcare setting.
• Bachelor's Degree in health care administration, business or information technology, cybersecurity or related field; or combination of equivalent experience and education.
• Proven experience in IT leadership and management supporting medium sized organization with over 400 users working across multiple locations.
• Track record of designing and implementing security solutions and best practices in a healthcare setting.
• Experience with EHR management, regulatory oversight, information security management, voice/telecommunications and IT operations.
• Proven experience establishing or maturing a data governance program in a healthcare setting.
• Demonstrated change management expertise, with a track record of successfully leading staff and clinical teams through major technology transitions.
• Demonstrated project management skills.
• Strong understanding of cybersecurity principles and practices.
• Deep understanding of healthcare industry standards and compliance regulations, including HIPAA and HITECH.
• Experience with healthcare interoperability and integration.
• Excellent problem-solving and decision-making skills.
• Excellent communication (oral and written) and interpersonal skills.
• Proven track record in developing information security policies and procedures.
• Valid Driver's License, vehicle insurance, and DMV printout.
  
  

Preferred Qualifications

• Microsoft or Cisco certification.
• Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM).
• Experience leading or participating in an EHR selection, implementation, or migration project.
• Deep expertise in the Microsoft 365 and Azure ecosystem, including Entra ID, Intune, Defender, Purview, SharePoint, and Teams.
  
  

Indian Preference

Preference in filling vacancies will be given to qualified Indian applicants in accordance with the Indian Preference Act (Title 25, U.S Code, section 472 & 473). In other than the above, Chapa-De Indian Health Program, Inc. is an Equal Opportunity Employer.

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee is regularly required to talk and hear. The employee frequently is required to stand, walk, sit, use hands to finger, handle, or feel; and reach with hands and arms. The ability to distinguish letters and symbols as well as the ability to utilize telephones, computer terminals and copiers is required. The employee must occasionally be required to stoop. The employee must occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this job include close vision, distance vision, color vision, peripheral vision, depth perception and ability to adjust focus.

The employee may be in contact with individuals and families in crisis who may be ill, using substances and/or not attentive to personal health and safety for themselves. The employee may experience a number of unpleasant sensory demands associated with the client's use of alcohol and drugs, and the lack of personal care. The employee must be ready to respond quickly and effectively to many types of situations, including crisis situations and potentially hostile situations.

To apply, visit https://chapa-de.atsondemand.com/#/jobDescription/912411

Copyright 2025 Jobelephant.com Inc. All rights reserved.

Posted by the FREE value-added recruitment advertising agency

jeid-da11606c63a9490eacbd3dd654144d9d