Senior Manager, IT & Software Engineering

Adoreal•Chicago, IL

2d•Remote

About The Position

Adoreal is a fast-growing vertical SaaS company that leverages innovation and disruptive technologies to improve consumer experiences, outcomes, and predictability in elective medicine. The company is seeking a hands-on Senior Manager, IT & Engineering to build and lead its IT function from the ground up while providing technical leadership across a portion of its software engineering organization. This role is described as a hybrid role, indicating a blend of IT and engineering leadership responsibilities, and will own the company’s security posture, compliance programs, and core infrastructure, shaping and executing the overall IT and security strategy. The successful candidate will directly hire and manage a small IT team and partner closely with engineering leadership on secure development practices and architectural decisions. The team requires a player/coach with .NET experience who is ready to grow as the product, teams, and revenue expand. In this position, the Senior Manager will collaborate with team members and vendors to design, develop, and deploy top-tier healthcare software. They will provide technical leadership, work closely with architects and stakeholders, and ensure scalable, high-performance solutions. The ideal candidate should possess strong technical depth, a strategic mindset, and the ability to clearly communicate complex topics to both technical and non-technical stakeholders, including executive leadership and the board. While the position is US-Remote, there is an ideal preference for candidates near Chicago, IL, where Adoreal's future HQ will be located.

Requirements

5+ years of progressive IT development experience with at least 2 years in a leadership or management role
At least 5 years writing and developing code with C#/.NET Core environments, Kubernetes, or microservices architectures
Deep expertise in information security, including incident response, vulnerability management, and security architecture
Demonstrated experience with HIPAA compliance in a healthcare or healthcare technology environment
Hands-on experience with MDM solutions (JumpCloud preferred), identity providers, and endpoint protection platforms
Strong understanding of cloud security (AWS preferred), network security, and modern threat landscape
Experience building and leading IT teams, including hiring and developing talent
Working knowledge of software engineering practices sufficient to partner effectively with engineering leadership on DevSecOps, secure SDLC, and production system reliability
Experience with human resources-related tasks including managing time-off requests, performance reviews, and interviewing & hiring
Excellent written and verbal communication skills, with the ability to present to executive and board audiences
Enthusiasm for rapid advancement in a dynamic startup environment, with a readiness to invest additional hours to complete tasks effectively
CISSP, CISM, or equivalent security certification

Nice To Haves

Experience building IT/security functions from the ground up at a growth-stage company
Familiarity with GDPR compliance (Adoreal has achieved GDPR compliance)
Experience with security monitoring tools such as Datadog, CloudWatch, and Cloudflare
Background in healthcare technology or regulated industries

Responsibilities

Own and execute the organization’s security strategy, including incident response, vulnerability management, and threat detection
Lead HIPAA compliance initiatives by conducting risk assessments and implementing required security controls
Develop and maintain security policies, procedures, and documentation, including the Security Incident Response Plan
Conduct breach risk assessments and manage notification procedures in compliance with HIPAA requirements
Maintain the Security Incident Register and ensure proper documentation of all security events
Oversee IT infrastructure including MDM, identity management, endpoint protection, and network security
Manage the transition from BYOD to company-owned devices, implementing secure device lifecycle management
Implement and manage SSO, MFA, and privileged access management across the organization
Ensure business continuity through disaster recovery planning and regular testing
Develop and enforce contractor security policies and vendor security assessment frameworks
Manage vendor relationships for security tools, MDM platforms, and IT services
Conduct Business Associate Agreement reviews and ensure vendor HIPAA compliance
Report on security posture, incidents, and compliance status to executive leadership and the board
Lead security awareness training programs for all employees
Coordinate with engineering leadership on secure development practices and DevSecOps integration
Partner on architectural decisions for scalability, security, and performance of healthcare software systems
Contribute technical guidance on CI/CD standards, quality metrics, and cloud infrastructure where security and engineering intersect
Provide input on engineering best practices that affect compliance, data protection, and production stability
Design, develop, enhance, triage, and debug Web APIs using C# and .NET Core