Director of IT & Information Security (HIPAA/SOC 2)

Take Command Health; Dallas (TX); Hybrid; USD 210,000 - 290,000; Full time

Benefits offered by this job

ICHRA health benefits

Unlimited vacation

401(k) with 4% match

Job summary

Take Command Health is seeking a hands-on Director of Information Technology & Information Security to lead our corporate IT operations and own our information security program end to end in Dallas, TX. You will build security controls, policies, and governance for PHI, HIPAA, and SOC 2 while managing a small team in a hybrid/onsite setting.

The role partners with executive leadership to align technology with business goals, oversees vendor management and budget, and drives incident response,

Qualifications

• 8+ years in IT ops or information security with leadership experience.
• Startup experience and ability to mature security programs.
• Experience in regulated industries (healthcare, insurance, finance).
• Hands-on HIPAA and SOC 2 compliance knowledge and audits.
• Vendor management, budgets, and SLAs.

Responsibilities

• Own IT operations, infrastructure availability, and IAM across the org.
• Lead information security program, policies, and risk management.
• Direct HIPAA and SOC 2 compliance efforts and audits.
• Manage third-party risk, vendor contracts, and budgets.
• Partner with Eng/PM to integrate security into SDLC and cloud.

Skills

Cloud security

IAM

EDR

Network security

HIPAA compliance

Security monitoring

SIEM tooling

Education

Bachelor's degree in Computer Science/Info Security

Tools

SIEM platforms

EDR/XDR

Vulnerability scanners

GRC automation tools

Job description

Take Command Health is seeking a hands-on Director of Information Technology & Information Security to lead our corporate IT operations and own our information security program end to end in Dallas, TX. You will build security controls, policies, and governance for PHI, HIPAA, and SOC 2 while managing a small team in a hybrid/onsite setting.

The role partners with executive leadership to align technology with business goals, oversees vendor management and budget, and drives incident response,