Director of IT (4471)

Under minimal supervision, directs and oversees the Information Technology operations of the agency. Provides executive leadership for enterprise technology strategy, cybersecurity, information governance, infrastructure, telecommunications, enterprise applications, project management, data management, cybersecurity risk management, and digital transformation initiatives.

Serves as the agency’s senior technology leader and principal advisor to executive leadership on technology planning, cybersecurity risk, information management, regulatory compliance, technology investments, business continuity, and emerging technologies.

The Director of Information Technology ensures that technology services, systems, information assets, and digital platforms are secure, reliable, accessible, resilient, compliant, and aligned with the agency’s mission, strategic goals, clinical operations, administrative functions, and business objectives while supporting high-quality service delivery throughout the organization.

• Directs and oversees all information technology resources and operations of the agency.
• Develops and executes a comprehensive technology strategy and multi-year technology roadmap aligned with organizational priorities.
• Plans, organizes, monitors, and evaluates information technology operations to ensure effectiveness, efficiency, security, and regulatory compliance.
• Leads technology modernization and digital transformation initiatives that enhance organizational effectiveness and service delivery.
• Advises executive leadership regarding technology planning, budgeting, investments, risks, resource allocation, and emerging trends.
• Supports organizational strategic planning and operational excellence initiatives.
• Evaluates emerging technologies, automation solutions, artificial intelligence applications, and other innovations for organizational benefit and risk.

• Provides leadership for network infrastructure, cloud environments, telecommunications, enterprise applications, hardware management, software platforms, and technical support services.
• Directs information technology projects from planning through implementation, evaluation, and continuous improvement.
• Oversees enterprise application administration, systems integration, application governance, and technology lifecycle management.
• Establishes measurable service levels, performance standards, operational metrics, and executive reporting processes.
• Coordinates technology activities with internal departments, vendors, consultants, government agencies, and community partners.

• Provides executive oversight of cybersecurity governance, information security programs, risk management activities, incident response, and security awareness initiatives.
• Develops, implements, and maintains information security policies, standards, procedures, and controls.
• Ensures appropriate safeguards are maintained to protect electronic protected health information (ePHI), personally identifiable information (PII), confidential business information, and organizational technology assets.
• Oversees cybersecurity risk assessments, vulnerability assessments, remediation activities, audit responses, and corrective action plans.
• Coordinates organizational responses to cybersecurity incidents, suspected breaches, ransomware events, and information security threats.
• Promotes cybersecurity awareness and security best practices throughout the organization.

• Provides leadership for information governance, data management, reporting, analytics, and business intelligence initiatives.
• Supports organizational compliance with HIPAA, HITECH, ADA accessibility requirements, cybersecurity standards, records retention requirements, and other applicable federal and state regulations.
• Ensures agency technology operations remain compliant with accreditation standards, contractual obligations, and regulatory requirements.
• Establishes governance processes supporting accountability, transparency, and organizational objectives.

• Develops and maintains business continuity, disaster recovery, backup, and technology resilience programs.

• Ensures critical systems remain operational and recoverable during disruptions or emergencies.
• Coordinates testing, validation, and continuous improvement of disaster recovery and continuity plans.
• Provides leadership during major technology outages and emergency response situations.

• Oversees technology budgets, procurement activities, vendor contracts, software licensing, and strategic technology partnerships.
• Monitors technology expenditures and resource utilization.
• Evaluates technology investments and return on investment opportunities.
• Negotiates and manages contracts with vendors, service providers, consultants, and technology partners.

• Advanced knowledge of information technology operations, infrastructure, networking, cloud computing, systems administration, cybersecurity, and enterprise applications.
• Knowledge of healthcare technology environments and information systems supporting clinical and administrative operations.
• Knowledge of HIPAA, HITECH, cybersecurity regulations, privacy requirements, records retention requirements, and applicable federal and state laws.
• Knowledge of information governance, data management, analytics, business intelligence, and reporting systems.
• Knowledge of cybersecurity frameworks, risk management methodologies, vulnerability management, identity and access management, and incident response practices.
• Knowledge of disaster recovery planning, business continuity management, and technology resilience strategies.
• Knowledge of technology budgeting, procurement, vendor management, and contract administration.
• Knowledge of project management methodologies and enterprise technology implementation practices.
• Ability to analyze complex business and technology challenges and implement effective solutions.
• Ability to communicate technical and cybersecurity concepts to executive leadership, governing bodies, regulators, and non-technical stakeholders.
• Ability to develop strategic plans and translate organizational priorities into actionable initiatives.
• Ability to lead organizational change and technology adoption efforts.
• Ability to manage multiple priorities, large-scale initiatives, and competing deadlines simultaneously.

• Strategic Leadership
• Problem Solving and Analysis
• Change Management
• Technology Governance
• Cybersecurity Risk Management
• Communication Proficiency
• Ethical Conduct
• Financial Management
• Time Management
• Customer and Client Focus
• Personal Effectiveness and Credibility
• Professionalism and Organizational Effectiveness
• Innovation and Continuous Improvement
• Executive Decision-Making
• Information Governance and Stewardship
• Inspires and Motivates Others
• Organizational Development
• Relationship Management

• Bachelor’s degree from an accredited college or university in Information Technology, Computer Science, Information Systems, Cybersecurity, Business Administration, Healthcare Administration, Health Informatics, Engineering, or a closely related field and eight (8) years of progressively responsible information technology experience, including leadership responsibility for technology operations, strategic planning, systems administration, cybersecurity, and complex technology projects; OR
• Associate degree in a related field and ten (10) years of progressively responsible information technology experience with demonstrated leadership responsibility for technology operations and enterprise technology initiatives.

• Master’s degree in Information Technology, Information Systems, Cybersecurity, Business Administration, Healthcare Administration, Health Informatics, or a related discipline.
• Experience in healthcare, behavioral health, human services, government, or another highly regulated environment.
• Experience managing cybersecurity, information security, and risk management programs.
• Experience supporting compliance audits, risk assessments, and remediation initiatives.
• Experience leading large-scale technology implementations, modernization efforts, or organizational transformation initiatives.
• Demonstrated experience managing technology contracts, strategic partnerships, operational budgets, and capital expenditures.
• Demonstrated experience in independent problem-solving and effective written, verbal, and interpersonal communication.

One or more of the following certifications is preferred:

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)
• Certified in Risk and Information Systems Control (CRISC)
• Certified Information Privacy Professional (CIPP)
• Project Management Professional (PMP)
• ITIL Certification
• Certified Healthcare CIO (CHCIO)
• Certified Professional in Healthcare Information and Management Systems (CPHIMS)

• Relevant cloud, enterprise architecture, cybersecurity, or governance certifications

Upon appointment to the position, the employee assumes responsibility for meeting and maintaining all minimum qualification requirements, including applicable certifications, licenses, continuing education, competency validations, and mandatory annual or recurrent training. Failure to maintain such requirements may affect eligibility to perform assigned duties.

• Responsible for the overall operation of technology functions and assigned staff.
• Establishes and communicates departmental goals, objectives, and performance expectations.
• Monitors operational performance and evaluates employee effectiveness.
• Provides coaching, mentorship, and ongoing performance feedback.
• Supports employee development, succession planning, and professional growth initiatives.
• Builds a culture of accountability, customer service, innovation, cybersecurity awareness, and continuous improvement.
• Leads organizational change initiatives and stakeholder engagement efforts.
• Develops innovative approaches to improve technology programs and business processes.
• Conducts employee evaluations and addresses performance concerns when necessary.
• Promotes employee engagement, collaboration, recognition, and retention.
• Supports workforce continuity planning for critical technology functions.

This position operates in a variety of office, technology, healthcare, and community environments. The role routinely utilizes computers, servers, networking equipment, telecommunications systems, telephones, photocopiers, filing systems, and related technology resources. Moderate travel between Gateway locations and community sites may be required.

The position may be required to respond to technology emergencies, cybersecurity incidents, system outages, and critical operational events outside normal business hours.

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position.

• Frequently walks, sits, stands, and kneels.
• Occasionally climbs, balances, bends, and stoops.
• Frequently lifts and/or moves up to 15 pounds.
• Must have the ability to sit for extended periods while working at a computer.
• Frequently utilizes fine hand-eye coordination, hearing, and visual acuity.