Director, IT & Security

About This Role

Key ResponsibilitiesAI-extracted

• 1
  Own end-to-end IT operations, including device lifecycle, onboarding/offboarding, SaaS administration, identity and access management, help desk, and office infrastructure across all locations.
• 2
  Lead the technical controls side of Tonal's HIPAA compliance program, implementing the safeguards required by the HIPAA Security Rule and HITECH Act.
• 3
  Own and execute Tonal's security program, including penetration testing remediation, security policy, tabletop exercises, vendor security reviews, and incident response.
• 4
  Govern Tonal's AI tool ecosystem, including licensing, spend, API key governance, corporate AI policy, and DLP and prompt injection protections.
• 5
  Drive automation and identity governance maturity, including Okta Identity Governance, expanding SCIM-based provisioning, building & enforcing RBAC frameworks, and driving workflow automation and system integration.

RequirementsAI-extracted

• 10+ years in IT and security leadership, with full functional ownership and experience across identity and access management, endpoint security, SaaS administration, network infrastructure, and security program management.
• Hands-on HIPAA compliance implementation experience, beyond writing policies.
• Track record of building a security program from the ground up: policy, penetration testing, and real incident response.
• Broad expertise across identity and access management, endpoint security, SaaS administration, and network infrastructure.
• Strong people leadership skills, setting clear expectations and developing team members.

Perks & BenefitsAI-extracted