Director of Technology & Information Security

Technology Infrastructure

Oversee the procurement, deployment, and maintenance of hardware, software, and network infrastructure.

Oversee computer operations for the agency's information system, including local area networks, wide-area networks, and electronic health applications.

Manage daily operations of Enterprise Hardware (networking, desktop support, audio visual support, contact center, telecommunications) and IT Help Desk.

Ensure continuous delivery of technical services through oversight of service level agreements and monitoring of systems, programs, and equipment performance.

Oversee the design, implementation, and evaluation of the systems that support end users in the productive use of computer hardware and software.

Manage IT budgets and resource allocation.

Develop and maintain the systems architecture, defining standards and protocols for data exchange, communications, software and interconnection of agency information systems.

Define requirements for new technology implementations and communicate them as appropriate.

Ensure optimal performance and reliability of IT systems and applications.

Own the MSP relationship for Tier 3 infrastructure support: negotiate contracts, define scope, set performance expectations, and hold the MSP accountable to SLAs.

Operationalize IT strategy with organizational business and clinical objectives.

Suggests and implements new technology to improve efficiency, productivity, and overall experience for patients and employees.

Monitor IT projects and initiatives, including system upgrades and implementations.

Oversee vendor selection and management for outsourced IT services.

Ensure system configuration is optimized for data capture, retrieval and transmission, identified in coordination with the Director of Data.

Ensure availability and functionality of the electronic health record, guiding upgrades and integration to optimize performance.

In coordination with the Learning and Development team and the Director of Data, develop electronic record application training to support optimal use of the system and accurate capture of necessary data.

Demonstrate leadership and judgement when collaborating with other leaders in establishing priorities.

Oversee the development and execution of end-user training programs to improve IT literacy and security awareness.

Information Security

Develop and implement a comprehensive information security strategy and threat management, including oversight of policies, procedures, and standards.

Oversee the planning, implementation, and execution of security standards and procedures to ensure system security compliance.

Lead identity and access management, including zero-trust architecture adoption and privileged access governance.

Oversee security operations in coordination with the IT Operations Manager and MSP: SIEM monitoring, EDR, email security, and network segmentation.

Oversee the development, scheduling, planning, testing and communication of the IT Disaster Recovery Plan and back up procedures.

Manage IT risk assessments, audits, and security incident investigations.

Stay informed about emerging threats and vulnerabilities and implement proactive measures as needed.

Govern Microsoft Defender suite deployment across endpoints, email, and cloud workloads.

Collaborate with other departments to identify and mitigate security risks.

Build trust and respect for information security across the organization through effective communication, education and advocacy.

Expand employee awareness of security risks and mitigation strategies.

Maintain awareness of tribal data sovereignty considerations and apply appropriate safeguards in all data governance decisions.

Regulatory Oversight

Ensure that all information systems, applications and networks operate according to internal standards, external accrediting agency standards, regulatory agencies and legal requirements, including HIPAA and Federal Bureau of Investigation (FBI) Livescan program requirements.

Maintain awareness of existing and emerging technologies, regulatory updates, and market factors and assist in the development of the IT strategy, plan and compliance.

Establish, implement and maintain architecture documentation, policies, procedures, systems and standards as required to comply with regulatory agencies.

Serve as designated Local Agency Security Officer for Chapa-De Indian Health's Live Scan fingerprint background check.