IT & Privacy Strategy Lead

Cedarhurst Living; Northern (KY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Cedarhurst Living is seeking a Director of IT and Privacy to lead the Dover Companies' information technology function and serve as the data privacy and security compliance authority. This role directs strategy, governance, and risk management to enable secure, scalable technology across the organization.

The Director will oversee IT operations, data privacy programs, incident response, vendor risk, audit processes, and regulatory compliance with HIPAA and SOX, while partnering with Legal and

Qualifications

• Bachelor's degree in information technology, Computer Science, Cybersecurity, or a related field; equivalent experience considered in lieu of degree. A master's degree is preferred.
• Eight (8) to ten (10)+ years of progressive experience in information technology, with at least four (4) years in a leadership role overseeing both IT operations and data privacy/security compliance.
• Experience leading a help desk or end‑user support function is required.
• Demonstrated experience working within a regulated industry (healthcare) and direct familiarity with HIPAA and/or SOX requirements.
• Strong working knowledge of privacy frameworks and regulations, including state and federal data privacy laws.
• Experience leading incident response, vendor risk management, and audit/regulatory examination processes.
• Proven ability to manage teams, budgets, and cross‑functional projects, and to communicate technical and regulatory concepts to non-technical executives and staff.
• Experience with the senior living, construction, home health, hospice, and/or pharmacy industries is a plus.

Responsibilities

• Develop and execute the organization's IT strategy, roadmap, and budget in alignment with business goals and growth plans.
• Lead, mentor, and develop the IT team, including infrastructure, help desk, and applications, and manage relationships with outsourced/managed service providers.
• Support the Help Desk Manager in ensuring high-quality, responsive, and accountable support experience for all employees. Monitor help desk performance to identify root causes and improve service.
• Lead enterprise technology rollouts from planning through implementation, adoption, and post-launch optimization. Collaborate with all departments to ensure launches are operationally sound.
• Own the enterprise data privacy program, including policies, procedures, and controls governing the collection, storage, use, and disposal of personal, financial, and protected health information.
• Ensure ongoing compliance with applicable regulatory frameworks, including HIPAA, SOX IT general controls, state and federal privacy laws, as applicable to the business.
• Design, implement, and continuously improve the organization's cybersecurity program, including network security, endpoint protection, identity and access management, and data loss prevention. Mitigate harm from known impermissible uses and disclosures.
• Serve as the organization's primary point of contact for data privacy matters, including responding to regulator inquiries, data subject requests, and privacy impact assessments.
• Lead incident response planning and execution for security incidents and data breaches, including coordination with legal counsel and executive leadership as required.
• Partner with Legal and Finance to support SOX IT controls testing, audit requests, and remediation of findings.
• Manage vendor risk assessments and third-party due diligence for technology vendors handling sensitive or regulated data, including contract review for data protection and privacy terms for IT, website and software. Coordinates and ensures privacy compliance during implementation of all new technologies.
• Oversee enterprise IT infrastructure, including networks, servers, cloud environments, disaster recovery, and business continuity planning.
• Develop, maintain, and enforce IT and privacy policies, standards, and employee training programs, including annual security and privacy awareness training.
• Oversee the access request process, amendment requests, accounting of disclosures, and restrictions
• Evaluate and recommend new technologies, tools, and processes that improve operational efficiency, data governance, and regulatory compliance.
• Prepare and present IT and privacy program updates, risk assessments, and compliance metrics to executive leadership as needed.
• Stay informed on technology trends in senior living, healthcare, hospitality, smart-home technology, artificial intelligence, automation, and resident and patient experience.
• Other duties as assigned

Skills

Leadership

HIPAA compliance

SOX IT controls

Privacy frameworks

Incident response

Vendor risk management

Audit coordination

Budget management

Cross-functional collaboration

Executive communication

Education

Bachelor's degree in IT/CS/Cybersecurity

Master's degree preferred

Job description

Cedarhurst Living is seeking a Director of IT and Privacy to lead the Dover Companies' information technology function and serve as the data privacy and security compliance authority. This role directs strategy, governance, and risk management to enable secure, scalable technology across the organization.

The Director will oversee IT operations, data privacy programs, incident response, vendor risk, audit processes, and regulatory compliance with HIPAA and SOX, while partnering with Legal and