Director of IT & Privacy

We need to output HTML fragment with sections: About the role? Actually we need to use headings for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must include only sections that have real specific content. The posting includes Company Overview (maybe About the role?), Position Summary, Why Work For Cedarhurst (benefits), Essential Duties (responsibilities), Qualifications, Education And/or Experience (qualifications), Working Conditions (maybe schedule? but not pay). No explicit Pay or Schedule. Benefits are described: competitive benefits package, medical insurance, life insurance, long-term disability, 401(k) with match, plus additional benefits: work that makes a difference, on-site gym, personal trainer, catered lunches, monthly team events. So we can have Benefits section. We need to not repeat job title as heading. No Job ID. Remove boilerplate like EEO, etc. We need to preserve all substantive info. Use

for each section heading. Use

• for lists. Use

  for prose. We need to decide sections: About the role (maybe Company Overview + Position Summary?), Responsibilities (Essential Duties), Qualifications (Qualifications, Education And/or Experience), Benefits (Why Work For Cedarhurst + Additional Benefits), maybe Skills? Not explicit separate skills; could be part of qualifications. Could omit Skills if no specific list. Schedule? Not given. Pay? Not given. So we omit those. We need to ensure we don't create empty sections. Let's extract content: Company Overview: paragraph about Cedarhurst Senior Living and Dover Companies. Position Summary: paragraph about Director of IT and Privacy leads... etc. Why Work For Cedarhurst: paragraph about core values, training, etc. Then list of benefits: competitive benefits package including medical insurance, life insurance, long-term disability coverage, and a 401(k) plan with company match (after one year of service) for eligible employees. Additional Benefits Include: list items. Essential Duties: list of duties (many sentences each starting with verb). We need to put each as

• . Qualifications, Education And/or Experience: list of requirements (bullet-like sentences). We'll put as
• . Working Conditions: paragraph about conditions, maybe we could treat as part of Responsibilities? But it's separate. Could be a section "Working Conditions". However headings list only includes About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. No Working Conditions. But we could incorporate into Responsibilities or About the role? The instruction: "use

  for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." It says e.g., meaning those are examples, not exclusive? It says "use

  for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." Likely they expect those headings only. But we could also add other headings if needed? The instruction: "use

  for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." It suggests those are typical headings; we could still use others if needed, but safer to stick to those. However we have content that doesn't fit exactly: Company Overview could be About the role. Position Summary also about role. Why Work For Cedarhurst could be Benefits. Essential Duties = Responsibilities. Qualifications, Education And/or Experience = Qualifications (or Requirements). Working Conditions maybe could be part of Responsibilities or About the role? Could be omitted? But we must preserve ALL substantive information. So we need to include Working Conditions somewhere. Could be part of About the role? Or we could create a section "Working Conditions" but that's not in the list; risk of being considered not following instruction. However the instruction says "use

  for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." The "e.g." implies those are examples, not exclusive. So we can add other headings if needed. Safer to add a section "Working Conditions". We'll follow the pattern. Thus sections: About the role (Company Overview + Position Summary), Responsibilities (Essential Duties), Qualifications (Qualifications, Education And/or Experience), Benefits (Why Work For Cedarhurst + Additional Benefits), Working Conditions (Working Conditions). No Skills, Pay, Schedule. We need to ensure we don't include filler like "commensurate with experience". Not present. Now craft HTML. We'll start with

  About the role

  then

  containing combined company overview and position summary. Ensure we keep all info. Company Overview paragraph: "Cedarhurst Senior Living is an experienced operator of independent living, assisted living and memory care communities across the Midwest, Mid-South, and Southeast. Cedarhurst Senior Living is part of the Dover Companies, a vertically integrated healthcare organization established in 2007 to develop, construct, acquire, own, and operate high-quality senior living communities. In addition to Cedarhurst Senior Living, the Dover Companies include Dover Development, Brahms Construction, Dover Capital, Dover Health, and Medicine Express. Cedarhurst Senior Living and the Dover Companies are mission driven — everything we do is grounded in our higher purpose of caring for seniors. Our decision making is informed by our mission “to create communities where each person feels loved, valued, supported and able to live life to the fullest.” Each business unit and each team member have a unique ability and responsibility to impact the lives of seniors, and we take that responsibility very seriously. We also embody an entrepreneurial spirit that has fueled our growth and continues to drive us forward." Position Summary paragraph: "The Director of IT and Privacy leads the Dover Companies' information technology function and serves as the organization's data privacy and security compliance authority. This role is responsible for the strategic direction, operation, and security of enterprise IT systems, along with the design and oversight of privacy and regulatory compliance programs governing the collection, use, and protection of sensitive data. Given the regulated nature of the business, the Director ensures the organization's technology infrastructure and data handling practices meet applicable requirements under frameworks such as HIPAA, the Sarbanes-Oxley Act (SOX), and other healthcare industry regulations, while enabling the business through reliable, secure, and scalable technology. The Director is ultimately responsible for ensuring team members have reliable, secure, and practical technology that supports business purposes." We can combine into one

  or two

  . Probably one

  with both paragraphs separated by a space. Next Responsibilities:

  Responsibilities

  then
  with each duty as
  • . Need to extract each duty sentence from Essential Duties list. List: - Develop and execute the organization's IT strategy, roadmap, and budget in alignment with business goals and growth plans. - Lead, mentor, and develop the IT team, including infrastructure, help desk, and applications, and manage relationships with outsourced/managed service providers. - Support the Help Desk Manager in ensuring high-quality, responsive, and accountable support experience for all employees. - Monitor help desk performance to identify root causes and improve service. - Lead enterprise technology rollouts from planning through implementation, adoption, and post-launch optimization. - Collaborate with all departments to ensure launches are operationally sound. - Own the enterprise data privacy program, including policies, procedures, and controls governing the collection, storage, use, and disposal of personal, financial, and protected health information. - Ensure ongoing compliance with applicable regulatory frameworks, including HIPAA, SOX IT general controls, state and federal privacy laws, as applicable to the business. - Design, implement, and continuously improve the organization's cybersecurity program, including network security, endpoint protection, identity and access management, and data loss prevention. Mitigate harm from known impermissible uses and disclosures. - Serve as the organization's primary point of contact for data privacy matters, including responding to regulator inquiries, data subject requests, and privacy impact assessments. - Lead incident response planning and execution for security incidents and data breaches, including coordination with legal counsel and executive leadership as required. - Partner with Legal and Finance to support SOX IT controls testing, audit requests, and remediation of findings. - Manage vendor risk assessments and third-party due diligence for technology vendors handling sensitive or regulated data, including contract review for data protection and privacy terms for IT, website and software. - Coordinates and ensures privacy compliance during implementation of all new technologies. - Oversee enterprise IT infrastructure, including networks, servers, cloud environments, disaster recovery, and business continuity planning. - Develop, maintain, and enforce IT and privacy policies, standards, and employee training programs, including annual security and privacy awareness training. - Oversee the access request process, amendment requests, accounting of disclosures, and restrictions - Evaluate and recommend new technologies, tools, and processes that improve operational efficiency, data governance, and regulatory compliance. - Prepare and present IT and privacy program updates, risk assessments, and compliance metrics to executive leadership as needed. - Stay informed on technology trends in senior living, healthcare, hospitality, smart-home technology, artificial intelligence, automation, and resident and patient experience. - Other duties as assigned Note some sentences have line breaks; we need to keep them. We'll create
  • for each. Next Qualifications:

    Qualifications

    then
    with each requirement. List: - Bachelor’s degree in information technology, Computer Science, Cybersecurity, or a related field; equivalent experience considered in lieu of degree. A master’s degree is preferred. - Eight (8) to ten (10)+ years of progressive experience in information technology, with at least four (4) years in a leadership role overseeing both IT operations and data privacy/security compliance. - Experience leading a help desk or end-user support function is required. - Demonstrated experience working within a regulated industry (healthcare) and direct familiarity with HIPAA and/or SOX requirements. - Strong working knowledge of privacy frameworks and regulations, including state and federal data privacy laws. - Experience leading incident response, vendor risk management, and audit/regulatory examination processes. - Proven ability to manage teams, budgets, and cross-functional projects, and to communicate technical and regulatory concepts to non-technical executives and staff. - Experience with the senior living, construction, home health, hospice, and/or pharmacy industries is a plus. We'll keep as
    • . Next Benefits:

      Benefits

      then

      for prose about core values etc, then

      for list of benefits. Paragraph: "At Cedarhurst, our core values guide how we work together and how we care for those we serve. We expect every team member to be passionate, trustworthy, empathetic, positive, respectful, and approachable. Being part of Cedarhurst means making a meaningful difference every day. We believe our team is our greatest strength. That’s why we invest in comprehensive training, as well as opportunities for both personal and professional growth. We’re committed to promoting from within and supporting team members who want to build their careers with us." Then list: - competitive benefits package, including medical insurance, life insurance, long-term disability coverage, and a 401(k) plan with company match (after one year of service) for eligible employees. - Work that makes a difference in the lives of our residents and community - An on-site gym with brand-new equipment - A personal trainer offering daily group classes, stretching sessions, and one-on-one training - Catered lunches twice a week, prepared by our on-site chef - Monthly team events and more We'll put each as
      • . Next Working Conditions:

        Working Conditions

        then

        with the paragraph. Paragraph: "As part of The Dover Company’s commitment to providing outstanding care and support, the company ensures that staff work under conditions that prioritize safety, collaboration, and professional growth. The conditions listed below define the experience of working in the Home Office or remotely. This position may involve a range of physical activities, including those outlined in the Essential Duties, but is not limited to