Sr. Manager IT

SpectraMedix; New Jersey; On-site; USD 150,000 - 210,000; Full time

Job summary

SpectraMedix, based in East Windsor, New Jersey, seeks a Director of Infrastructure & Security to lead IT infrastructure, security governance, and regulatory compliance. You will oversee cloud and on-premises environments, drive resilience, and align security with business goals.

Responsibilities include managing audits, risk assessments, and cross-functional collaboration with executives to ensure cost-effective, secure operations within a healthcare-focused organization.

Qualifications

• Minimum 10+ years in IT infrastructure and security management.

Responsibilities

• Lead IT infrastructure operations and security program.

Skills

IT infrastructure

Security management

Cloud computing

Azure

Risk assessment

Hybrid cloud

Education

Bachelor's or Master's in CS/IT

Tools

FortiGate

ManageEngine Log360

Sophos Anti-malware

Qualys

AD Audit Plus

Endpoint Central

Job description

SpectraMedix is at the forefront of transforming healthcare, empowering health plans and health systems with the tools and insights they need to provide better, more cost-effective care to the communities they serve. Our cutting-edge platform delivers advanced analytics that help organizations excel in the transition to new value-based payment (VBP) models.

By combining advanced technology with a team of seasoned experts, we provide a unique solution tailored to meet the needs of the healthcare industry during this critical phase of value-based care evolution. Our platform is strategically designed to guide health plans, accountable care organizations, and health systems in their journey toward achieving success in value-based payment initiatives.

We are committed to creating an environment where innovation thrives, employees are empowered to drive meaningful change, and every team member plays a key role in reshaping the value and quality equation in healthcare. Our organization’s long-term stability is grounded in this commitment, and we prioritize our employees\' growth, well-being, and success as the foundation for a thriving future—both for them and for the communities we serve.

Our Values

Diversity & Inclusivity

At SpectraMedix, we believe that diversity drives innovation and inclusivity fosters collaboration. We are committed to creating a workplace where everyone feels valued, respected, and empowered to bring their authentic selves to work. We celebrate diverse perspectives and are dedicated to providing equal opportunities for all, regardless of race, gender, age, disability, or background. Join us in building a culture of belonging and mutual respect.

What are we looking for

The Director of Infrastructure & Security will lead and secure SpectraMedix\'s IT infrastructure, ensuring its scalability, reliability, and compliance with healthcare industry standards. This role demands a visionary leader with technical expertise and a strategic approach to infrastructure and security management. The Director will collaborate closely with executive leadership on infrastructure investments, enforce compliance with healthcare security regulations and IT best practices, and drive a security-first approach within the organization. The Director of Infrastructure & Security also serves in the role of Chief Information Security Officer (CISO).

Location: East Windsor, New Jersey

Infrastructure & IT Operations:

• Leading management of Azure cloud computing resources, co-located data center, and office sites’ on-premises virtualized server platforms and networks, focusing on high performance, scalability, and cost optimization.
• Design and implement robust resiliency strategies, ensuring business continuity aligned with industry best practices to ensure client SLA compliance
• Manage relationships with vendors, negotiate contracts, and implement solutions to maximize infrastructure value.
• Direct the planning and execution of hardware and software upgrades, balancing innovation with cost control.

Security & Compliance Management:

• Establish and enforce policies that protect infrastructure, sensitive data and maintain compliance with healthcare industry security regulations, frameworks and standards (HIPAA, HITRUST, SOC2, NIST).
• Conduct regular assessments, patch management, and vulnerability scans to mitigate risks in a budget-conscious manner.
• Lead efforts in preparing for external audits, managing information security incidents, and ensuring effective compliance with regulatory standards.
• Support initiatives to secure sensitive healthcare data in compliance with federal and state laws and client contracts.
• Conduct periodic independent risk assessments and manage third-party audits, such as for HIPAA compliance, SOC2, and HITRUST certification/recertification.
• Implement security procedures, ensure workforce awareness, and educate staff about security best practices and policies.
• Manage the selection and deployment of essential security applications and tools, such as Sophos Anti-malware, Qualys Penetration Testing, ManageEngine Log360, Application Manager, AD Audit Plus, and Endpoint Central, etc. to ensure comprehensive protection across infrastructure.
• Advise on security capabilities and lead practices for mitigation of vulnerabilities and emerging threats identified through internal scans, testing, and security agency bulletins (e.g., US CERT, CISA), ensuring proactive response to risks.

Strategic IT Policy & Governance:

• Drive policies for infrastructure management, security frameworks, and system access, ensuring alignment with SpectraMedix’s goals and industry best practices.
• Provide input on IT infrastructure investments, prioritizing scalable and cost-effective solutions that align with long-term organizational needs.
• Review records of information system activity, such as audit logs, access reports, and security incident tracking, ensuring continuous improvement.
• Manage and mentor teams, including Network/System Engineers, Administrators and Security Analysts, fostering a culture of continuous improvement and technical excellence.
• Performs workforce management functions for Infrastructure & Security department, including setting departmental and individual objectives and key results, performance reviews, etc.
• Act as a key liaison, supporting IT and security initiatives with leadership, system/data owners, SaaS application managers, project managers, as well as client executives.
• Collaborates with Sales Team to define infrastructure and security requirements and estimated costs for proposals, RFPs and client SOWs and change requests.
• Oversee security policies, compliance programs, and collaborate with security champions across departments to cultivate a strong security culture within the organization.
• Support facility planning regarding physical security, disaster recovery, and infrastructure resilience planning for business continuity.
• Direct activities of IT security and ensure compliance with security standards and frameworks (NIST 800-53, SOC2, HITRUST).

Required Experience

• Minimum of 10+ years in IT infrastructure and security management, preferably in healthcare IT or population health, with a strong record of managing cloud and on-premises infrastructure, regulatory compliance, and performance optimization.
• Proven experience in leading security compliance efforts (HIPAA, HITRUST, SOC2) and implementing disaster recovery and business continuity plans.
• Extensive knowledge of network and data security systems, including firewalls, encryption, and monitoring tools (e.g., FortiGate, ManageEngine). Advanced skills in systems and network administration (Windows Server, Linux), virtualization (Hyper-V, VMware), and hybrid cloud platforms (Azure preferred), with a focus on cost-effective, secure operations.
• Knowledgeable and experienced with cybersecurity practices, including incident response, vulnerability assessment, and threat mitigation.
• Strong understanding of federal and state healthcare data protection laws, with practical skills in audit readiness and compliance.
• Skilled in analyzing and enhancing IT security through risk assessments & external securit yaudits.

Educational Qualification: Bachelors or Masters in Computers / Information technology or related discipline

Certifications:

• Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM)
• IT Infrastructure Library (ITIL) certification for service management or similar certifications.
• Cloud certifications (e.g., Microsoft Certified: Azure Fundamentals AZ-900, or AZ-500 for security-focused roles).
• Must have worked with US based clients in onsite/off shore delivery model
• Strong verbal and written communication, technical articulation, listening, and presentation skills are essential
• Should have proven analytical and problem-solving skills
• Demonstrated expertise in prioritization, time management, and stakeholder management (both internal and external) is necessary
• Should be a quick learner, self-starter, proactive, and an effective team player
• Must have experience working under tight deadlines within a matrix organizational structure