Director of Technology

HIGHTOP HEALTH LLC•York, NY

11h•$175,000 - $225,000

About The Position

Hightop Health is seeking a Director of Technology to own all aspects of the company’s technology, including IT infrastructure, cybersecurity, data and reporting platforms, EHR and software administration, vendor and MSP management, technology compliance (HIPAA/HITRUST), and budgeting. This is a hands-on working leadership role. As the company’s sole internal technology resource initially, the Director will work closely with the CFO, COO, and Operations leadership to manage and hold accountable the external vendors and MSPs who handle infrastructure, help desk, security, and network support, while directly owning and executing responsibilities that fall outside that managed coverage — including EHR and software platform administration, data and reporting infrastructure, compliance programs, and strategic technology initiatives. The expectation is that this person can and will do real work across all technology domains and will build out the Company’s internal technology function over time as the organization scales through organic growth and acquisition. The Director will act as the central point of accountability for all aspects of the company’s technology, and technology operations, ensuring investments, vendor performance, security initiatives, compliance programs, and operational priorities are aligned with organizational goals and monitored for performance.

Requirements

7+ years of experience in healthcare technology leadership, healthcare technology operations, or related roles.
Deep expertise with Electronic Health Record (EHR) platforms (Athena Health highly preferred) including integrations with related platforms including SFDC, PowerBI, etc.
Experience managing MSPs, technology vendors, and third-party service providers.
Strong understanding of IT governance, cybersecurity, risk management, and compliance frameworks in multi-location organizations.
Experience supporting mergers, acquisitions, and rapid growth environments.
Knowledge of Microsoft 365, endpoint management, cybersecurity programs, telecommunications, and cloud technologies.
Experience with HIPAA-regulated environments including SOC2 Type 2 and HITRUST.
Experience managing technology budgets and vendor contracts.
Excellent communication and executive presentation skills.
Willingness and ability to be hands-on and personally execute across technology domains as needed, particularly in the near term as the Company’s internal technology function is built out. This role requires someone comfortable doing real work, not just directing others or managing vendors.
Ability to balance multiple competing demands while balancing operational needs, compliance requirements, financial objectives, and strategic priorities.
PMP, ITIL, CISSP, CGEIT, CRISC, or related certifications.

Nice To Haves

Physician practice and/or behavioral health experience highly desired.

Responsibilities

Establish and maintain enterprise technology governance processes.
Develop and maintain technology policies, standards, and operating procedures.
Align technology initiatives with organizational and operational and financial goals.
Lead technology planning discussions with executive leadership.
Maintain multi-year technology roadmaps.
Provide recommendations on technology investments and strategic priorities, including expected ROIs and plans to measure against expectations.
Establish accountability across technology functions and service providers.
Serve as the primary relationship manager for all technology service providers.
Manage MSP relationships and determining insourcing vs. outsourcing capabilities and timing based on company’s objectives and financial feasibility.
Manage Company’s Electronic Health Record system (Athena), including serving as primary contact with vendor and liaison between vendor and business on capabilities and operations.
Coordinate vendor responsibilities and service ownership.
Lead vendor performance reviews and quarterly business reviews.
Monitor service delivery and escalation management.
Evaluate vendor contracts, renewals, and service agreements.
Ensure accountability for technology outcomes across vendors.
Eliminate service gaps and overlapping responsibilities.
Provide direction, coordination and oversight of major technology initiatives including new location openings, acquisitions and integrations, telephony and communications projects, security initiatives, infrastructure upgrades, software implementations, compliance-related initiatives, enterprise technology improvements, and development of data strategy and build of appropriate data repository to aggregate company data from multiple platforms for centralized access by business intelligence tools (Power BI).
Define project objectives.
Manage budgets and timelines.
Coordinate vendors and stakeholders.
Track risks and dependencies.
Report project status to executive leadership.
Provide governance and oversight for all technology, privacy and security compliance to ensure programs are maintained and properly coordinated across all vendors and stakeholders.
Ensure HIPAA compliance including SOC2 Type 2 readiness/certifications and any HITRUST initiatives.
Oversee security governance including policy development and enforcement.
Manage vendor risk.
Coordinate audit preparation.
Oversee incident response governance.
Implement cybersecurity awareness initiatives.
Own technology financial planning and oversight including working with finance to develop annual technology budget and reforecasts, capital expenditure planning, technology project budgeting and ROI analysis/monitoring, vendor contract review and cost management, monthly recurring technology expense oversight, software licensing review, and cost forecasting and reporting.
Act as the bridge between executive leadership and technology providers including translating technical recommendations and facilitating decision-making on all technology investments, presenting technology risks and opportunities to leadership, developing executive-level reporting and dashboards including ROI on technology projects and initiatives, and providing recommendations regarding vendor performance, technology strategy, compliance, and operational priorities.