Director of Information Technology

Healthcare Management Company | Behavioral Health & Substance Use Disorder Treatment

Department: Corporate / Information Technology
Employment Type: Full-Time
Reports To: CEO
Environment: Multi-location healthcare / behavioral health organization
Travel: Periodic travel between company facilities as required

Position Summary

We are seeking an experienced, hands-on Director of Information Technology to lead and manage all technology operations across our corporate office and network of drug and alcohol rehabilitation facilities.

This position will serve as the organization's primary internal technology leader and will have end-to-end responsibility for IT infrastructure, cybersecurity, HIPAA compliance, networking, EHR systems, telecommunications, device management, vendor relationships, user support, and technology strategy.

The ideal candidate is equally comfortable developing organization-wide IT strategy and personally troubleshooting an issue at a facility. This is a highly hands-on leadership role for someone who can take ownership of the entire technology environment, establish standards and processes, improve security and reliability, manage outside vendors, and ensure employees across all locations have the technology they need to operate effectively.

Key Responsibilities

IT Leadership & Strategy

• Serve as the primary internal leader and point of accountability for all information technology matters across the organization.
• Develop and maintain an organization-wide IT strategy aligned with operational, clinical, compliance, security, and growth objectives.
• Evaluate the existing technology environment and identify opportunities to improve reliability, security, efficiency, standardization, and cost.
• Establish IT policies, procedures, documentation, standards, and best practices across all locations.
• Develop technology plans for new facilities, expansions, relocations, acquisitions, and other organizational growth.
• Advise executive leadership on technology risks, investments, infrastructure needs, cybersecurity, and emerging technology.
• Develop and manage the IT operating and capital budgets.

Infrastructure & Networking

• Oversee technology infrastructure across all corporate and treatment facility locations.
• Manage LAN/WAN environments, Wi-Fi, firewalls, switches, routers, VPNs, internet connectivity, and related network infrastructure.
• Maintain reliable and secure connectivity between facilities, cloud applications, EHR platforms, and other business systems.
• Establish consistent network and infrastructure standards across locations.
• Monitor system and network performance, availability, capacity, and security.
• Coordinate installation and configuration of technology infrastructure for new and existing facilities.
• Maintain accurate network diagrams, inventories, configurations, credentials, and technical documentation.
• Develop redundancy and business-continuity strategies for critical infrastructure and connectivity.

Cybersecurity & HIPAA

• Lead the organization's IT security program with particular emphasis on protecting electronic protected health information (ePHI) and other sensitive information.
• Maintain technical safeguards consistent with HIPAA Security Rule requirements and organizational policies.
• Implement and manage appropriate security controls including access management, multi-factor authentication, encryption, endpoint protection, firewalls, email security, logging, monitoring, and vulnerability management.
• Coordinate HIPAA security risk assessments and remediation efforts.
• Manage security awareness and phishing-prevention initiatives.
• Develop and maintain incident response, disaster recovery, backup, and business continuity procedures.
• Investigate suspected security incidents and coordinate response with leadership, compliance, legal counsel, insurers, and outside cybersecurity specialists when appropriate.
• Regularly review user permissions and privileged access.
• Ensure terminated employees and contractors are promptly and completely removed from organizational systems.
• Evaluate technology vendors that may access, transmit, process, or store protected health information and coordinate appropriate security and compliance requirements.
• Maintain documentation necessary to support audits, compliance reviews, insurance requirements, and security assessments.

EHR & Healthcare Technology

• Serve as the primary technical owner and internal resource for the organization's Electronic Health Record (EHR) environment.
• Manage user access, permissions, integrations, troubleshooting, upgrades, and technical vendor relationships related to the EHR.
• Work closely with clinical, compliance, admissions, billing, operations, and executive teams to ensure technology supports organizational workflows.
• Assist with EHR configuration, integrations, data exchange, reporting, and system optimization.
• Coordinate with EHR vendors and other healthcare technology providers to resolve technical issues and implement enhancements.
• Evaluate new healthcare technology solutions and integrations as organizational needs evolve.
• Help ensure systems containing patient information are appropriately secured and access is limited according to job responsibilities.

Microsoft 365, Cloud Systems & Identity Management

• Administer and oversee Microsoft 365 and other cloud-based business systems.
• Manage user accounts, email, groups, permissions, licenses, shared mailboxes, file storage, and collaboration tools.
• Manage identity and access controls, including MFA and role-based access.
• Establish standardized employee onboarding, role-change, and offboarding procedures.
• Manage organizational file-sharing and cloud-storage environments and establish appropriate access and retention standards.
• Review licensing and cloud-service usage to control costs and eliminate unnecessary accounts or services.

Device & Endpoint Management

• Manage the complete lifecycle of company-owned technology equipment.
• Maintain an accurate inventory of laptops, desktops, tablets, mobile devices, printers, networking equipment, and other technology assets.
• Configure, deploy, secure, monitor, update, and retire devices.
• Implement and manage mobile device management (MDM) and endpoint management solutions.
• Standardize hardware and software configurations across facilities.
• Manage operating system and application patching.
• Maintain endpoint security, encryption, antivirus/EDR, and remote-management capabilities.
• Develop secure procedures for lost, stolen, replaced, and retired equipment.
• Coordinate purchasing and deployment of technology equipment for new hires and new locations.

Help Desk & User Support

• Serve as the senior escalation point for technology issues across the organization.
• Establish an efficient process for employees to request and receive IT support.
• Troubleshoot hardware, software, email, network, printer, phone, EHR, account-access, and connectivity issues.
• Provide remote and on-site support as necessary.
• Prioritize issues based on business and clinical impact.
• Identify recurring problems and implement permanent solutions rather than relying on repeated workarounds.
• Develop user documentation and provide technology training when appropriate.
• Establish service expectations and track recurring IT issues to identify systemic problems.

Vendor & Contract Management

• Manage relationships with managed service providers, internet and telecommunications providers, EHR vendors, cybersecurity firms, software vendors, hardware suppliers, and other technology partners.
• Serve as the organization's primary technical contact with outside IT vendors.
• Evaluate vendor performance, capabilities, security practices, pricing, and service levels.
• Review technology contracts, renewals, licensing arrangements, and service agreements in partnership with leadership.
• Consolidate or replace vendors when doing so improves service, security, or cost efficiency.
• Coordinate vendor access to organizational systems and ensure access is appropriately restricted and removed when no longer necessary.
• Maintain centralized documentation of technology vendors, contracts, licenses, renewal dates, and key contacts.

Telecommunications & Facility Technology

• Oversee business phone systems, VoIP, conferencing, internet services, and related telecommunications.
• Coordinate technology requirements for new facilities and office build-outs.
• Work with contractors, electricians, low-voltage vendors, and internet providers regarding cabling, network closets, wireless access points, phones, cameras, access-control systems, and other technology infrastructure as applicable.
• Troubleshoot facility-specific technology issues and coordinate outside service providers when necessary.

Backup, Disaster Recovery & Business Continuity

• Ensure critical organizational systems and data are appropriately backed up.
• Regularly verify backup integrity and restoration capabilities.
• Develop and maintain IT disaster recovery procedures.
• Identify critical technology dependencies and develop contingency plans for outages, cyber incidents, internet failures, hardware failures, and other disruptions.
• Coordinate periodic testing of disaster recovery and business continuity procedures.

Documentation, Policies & Controls

• Create and maintain comprehensive documentation of the organization's technology environment.
• Maintain inventories of hardware, software, systems, licenses, vendors, accounts, networks, and critical technology assets.
• Develop written IT and information-security policies and procedures in coordination with compliance and executive leadership.
• Maintain change-management and administrative documentation for critical systems.
• Ensure technology practices are consistently implemented across all locations.

Qualifications

• 5 years of progressive information technology experience, preferably including responsibility for multi-site environments.
• Prior experience in healthcare, behavioral health, substance use disorder treatment, or another highly regulated industry strongly preferred.
• Demonstrated experience managing IT infrastructure, networking, cybersecurity, cloud systems, endpoints, and vendors.
• Strong working knowledge of HIPAA security requirements and protection of ePHI.
• Experience administering Microsoft 365 environments.
• Experience with EHR/EMR systems and healthcare technology strongly preferred.
• Strong understanding of networking, firewalls, VPNs, Wi-Fi, switching, routing, and internet connectivity.
• Experience with endpoint management, MDM, identity management, MFA, and cybersecurity tools.
• Experience managing backup, disaster recovery, and business continuity systems.
• Ability to troubleshoot complex technical issues independently.
• Experience managing third-party technology vendors and service providers.
• Strong organizational and documentation skills.
• Ability to communicate technical concepts clearly to executives and nontechnical employees.
• Ability to manage multiple locations, priorities, projects, and urgent issues simultaneously.
• Bachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related discipline preferred; equivalent professional experience will be considered.
• Valid driver’s license and reliable transportation.
• Ability to travel as needed.

Preferred Certifications

Relevant certifications are beneficial but not required, including:

• CISSP, CISM, Security , or comparable cybersecurity certifications
• Microsoft certifications
• Cisco certifications
• ITIL certification
• Healthcare information technology or security certifications

Pay: $145,000.00 - $175,000.00 per year

Benefits:

• Dental insurance
• Health insurance
• Paid time off
• Relocation assistance
• Vision insurance

Work Location: In person

Salary : $145,000 - $175,000