IT & Security Leader — HIPAA Compliance

Pacific Health Group; San Diego (CA); On-site; USD 79,000 - 83,000; Full time

Benefits offered by this job

401(k) with Company Match

Monthly Stipend

Employee Discounts via Great Work Perk

Job summary

Pacific Health Group is seeking a Manager of Information Technology & Information Security to own the security posture, HIPAA compliance, and IT infrastructure in a regulated healthcare environment. You will lead governance, risk, compliance, and incident response initiatives in a fast-paced, mission-driven setting.

The role requires strategic leadership and hands-on execution across cloud, networks, endpoints, and SaaS tools, with emphasis on PHI safeguards and regulatory alignment.

Qualifications

• Extensive experience in IT, cybersecurity, or information security leadership.
• Demonstrated expertise in HIPAA compliance and healthcare data protection.
• Strong understanding of cloud security, endpoint security, and identity management.
• Experience creating policies, controls, and compliance frameworks from the ground up.
• Ability to operate with high autonomy and accountability.

Responsibilities

• Own the Information Security Program across the organization.
• Lead HIPAA Security Rule, Privacy Rule compliance, and BAAs from a security perspective.
• Oversee IT infrastructure, networks, endpoints, SaaS apps, and internal tools.
• Establish incident response plans and lead responses to security incidents.
• Define data protection controls for PHI and sensitive information.
• Evaluate third-party vendors for security and risk posture.
• Develop and enforce IT and security policies for all staff.
• Provide executive-level governance, reporting on risks, compliance, and improvements.

Skills

IT leadership

Cybersecurity

HIPAA compliance

Cloud security

Policy development

Autonomy

Education

CISSP

CISM

Job description

Pacific Health Group is seeking a Manager of Information Technology & Information Security to own the security posture, HIPAA compliance, and IT infrastructure in a regulated healthcare environment. You will lead governance, risk, compliance, and incident response initiatives in a fast-paced, mission-driven setting.

The role requires strategic leadership and hands-on execution across cloud, networks, endpoints, and SaaS tools, with emphasis on PHI safeguards and regulatory alignment.