Chief Information Officer

Boston MedFlight; Bedford (MA); On-site; USD 203,000 - 248,000; Full time

Job summary

Boston MedFlight seeks a Chief Information Officer to lead IT strategy, governance, and cybersecurity across a 24/7 mission-critical healthcare transport network. The executive will partner with the Board and senior leaders to drive digital opportunities, risk management, and regulatory compliance.

The role oversees infrastructure, enterprise systems, and digital transformation initiatives while ensuring reliability, security, and patient data protection across all locations in Bedford, MA.

Qualifications

• Bachelor’s degree in information technology, cybersecurity, information systems, or related field required; Master’s preferred.
• Executive leadership experience with personnel, budgets, and enterprise initiatives.
• Healthcare environment knowledge including privacy, security, and regulatory alignment.

Responsibilities

• Develop and maintain multi-year IT strategy aligned with organizational priorities.
• Advise leadership and Board on technology strategy, cybersecurity risk, and capital needs.
• Lead cybersecurity and information-risk program, including policies, controls, and incident response.
• Ensure privacy and regulatory alignment with HIPAA and related requirements.
• Oversee enterprise systems across patient care, dispatch, and administration.
• Manage infrastructure, cloud, data storage, and security across locations.

Skills

IT Leadership

Cybersecurity governance

Budget management

Vendor management

Education

Bachelor’s degree in information technology

Master’s degree preferred

Tools

Microsoft products

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Chief Information Officer

Active - Full-time Regular Bedford, MA, US

2 days ago Requisition ID: 1102

Salary: $225,000.00 Annually

Position Overview:

• IT Strategy and Governance: Develop and maintain a multi-year information technology and digital strategy aligned with organizational priorities and measurable outcomes.
• Executive and Board Partnership: Advise executive leadership and the Board of Trustees on technology strategy, cybersecurity risk, business continuity, digital opportunities, regulatory exposure, capital requirements, and major technology initiatives. Translate complex technical issues into clear operational and financial implications.
• Cybersecurity and Information Risk: Lead an IT cybersecurity and information-risk program that protects patient, employee, operational, and business information. Maintain policies, controls, security awareness, incident response, vulnerability management, identity and access management, and third-party risk oversight.
• Healthcare Privacy and Regulatory Alignment: Partner with Compliance, Legal, Clinical, Human Resources, and operational leaders to support adherence to applicable privacy, security, records-management, and healthcare requirements, including HIPAA. Acts as Boston MedFlight’s Security Officer, ensuring technology practices support auditing, retention, access control, and appropriate handling of sensitive information.
• Operational Systems: Provide executive oversight for the selection, integration, reliability, and lifecycle management of systems and applications supporting patient care, communications, dispatch, aviation, ground transport, fleet, safety, quality, education, finance, human resources, and administration.
• Infrastructure and Enterprise Services: Oversee secure, scalable, and highly available infrastructure, including networks, servers, endpoints, cloud services, data storage, telecommunications, mobile devices, collaboration platforms, telephone systems, and security camera systems across Boston MedFlight locations.
• Business Continuity and Disaster Recovery: Establish and regularly test technology continuity, disaster recovery, backup, restoration, emergency communication, and cyber incident response capabilities. Coordinate technology response plans with organizational emergency preparedness and continuity activities.
• Digital Transformation and Innovation: Identify, evaluate, and responsibly implement technologies that improve workflows, service reliability, employee experience, and organizational effectiveness. Establish governance for automation, artificial intelligence, and other emerging technologies, including privacy, security, ethical use, and change-management considerations.
• IT Operations and Service Management: Ensure dependable day-to-day technology operations, responsive user support, effective incident and problem management, asset management, documentation, service-level monitoring, and continuous improvement. Establish metrics and communicate service performance and risks.
• Leadership and Workforce Development: Lead, develop, and retain a high-performing technology team. Define clear roles, accountability, succession planning, professional development, cross-training, and after-hours support expectations appropriate to a 24/7 critical care transport organization.
• Budget and Resource Stewardship: Develop and manage operating and capital budgets for technology, cybersecurity, infrastructure, licensing, staffing, and strategic initiatives. Prepare business cases, prioritize investments, manage total cost of ownership, and demonstrate value and risk reduction.
• Vendor and Contract Management: Oversee technology vendors, consultants, managed service providers, telecommunications carriers, software partners, and other service providers. Lead due diligence, contract and service-level negotiations, performance reviews, data-protection requirements, and risk remediation.
• Project and Change Leadership: Establish disciplined project portfolio management and change-management practices. Ensure technology initiatives include stakeholder engagement, workflow analysis, testing, training, adoption planning, documentation, and post-implementation review.
• Organizational Collaboration: Build strong partnerships across clinical, aviation, communications, ground operations, safety, quality, compliance, finance, human resources, facilities, education, and development. Promote practical, secure, and user-centered technology solutions that support Boston MedFlight’s mission and values.
• Other Responsibilities: Perform other duties as assigned in support of organizational priorities and emergency needs.
• Maintain reliable availability and flexibility to support a 24/7 mission-critical organization, including response to significant technology, cybersecurity, or continuity events.
• Travel between Boston MedFlight locations and to vendor, partner, training, or professional meetings as required.
• Demonstrate integrity, accountability, discretion, collaboration, and commitment to patient safety, information protection, service reliability, and Boston MedFlight’s mission and values.

Qualifications:

• Education: Bachelor’s degree in information technology, computer science, cybersecurity, information systems, business administration, healthcare administration, or a related field required. Master’s degree preferred.
• Experience: At least 12-15 years of progressively responsible information technology leadership experience, including significant responsibility for personnel, cybersecurity, infrastructure, budgets, vendors, and enterprise-wide initiatives. Executive-level or senior leadership experience strongly preferred.
• Healthcare Environment: Demonstrated understanding of healthcare information privacy, security, compliance, and operational continuity. Experience in healthcare, emergency services, aviation, transportation, public safety, or another mission-critical 24/7 environment preferred.
• Technology Leadership: Strong working knowledge of enterprise networks, cloud and on-premises systems, identity and access management, endpoints, telecommunications, mobile device management, Microsoft products, cybersecurity controls, backup and disaster recovery, and systems integration.
• Governance and Risk: Demonstrated ability to establish technology governance, manage enterprise risk, develop policies and standards, oversee complex vendors, and communicate technology and cybersecurity risk to executives and governing boards.

An FBI background and CORI checks will be performed prior to employment. Favorable criminal background check required.

In compliance with MA DPH, Boston MedFlight requires that all staff are vaccinated against influenza (flu) and COVID-19 as a condition of employment. Medical or religious exemptions will be accepted for the influenza vaccine. A signed waiver must be provided in lieu of Covid-19 vaccination upon hire if declining the vaccine.

Equal Employment Opportunity Statement:

Boston MedFlight is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, veteran status, or any other legally protected status.

Reasonable Accommodation Statement:

If you require a reasonable accommodation to complete any part of the application process or to perform the essential functions of a position, please contact [e-mail] .