Director, Information Security and IT

Responsibilities

• Lead enterprise cybersecurity strategy, roadmap, and security operations across cloud infrastructure and endpoints
• Build and maintain a comprehensive information security program including policies, governance, and risk management
• Serve as technical leader for enterprise IT operations and scalable technology services
• Own Identity and Access Management (IAM), including SSO, MFA, and provisioning
• Oversee endpoint management, MDM, and enterprise SaaS administration
• Lead vulnerability management, incident response, disaster recovery, and business continuity planning
• Ensure compliance with HIPAA, HITECH, and other regulatory frameworks
• Manage third-party security assessments and vendor risk reviews
• Mentor and develop a high-performing IT team

Requirements

• 8+ years of progressive experience in information security or enterprise IT leadership
• Proven success maturing cybersecurity programs in healthcare or highly regulated environments
• Direct experience with HIPAA-regulated technology environments and PHI protection
• Hands-on experience with cloud security (AWS, Azure, or GCP)
• Expertise in IAM, SSO, MFA, and Mobile Device Management (MDM)
• Experience leading incident response, disaster recovery, and vulnerability management
• Previous experience as a Director or Senior Manager with Director-level scope
• Ability to partner with executive leadership on technology strategy and risk evaluation

About the Company

Luna provides physical therapy delivered directly to patients, focusing on high-quality care and scalable technology solutions.