Sr. Director, Information Systems and Security (ISS)

HISTOSONICS INC•Plymouth, MN

1d•Hybrid

About The Position

HistoSonics is a commercial-stage medtech company advancing the Edison® System, a novel non-invasive sonic beam therapy based on histotripsy. Since receiving FDA De Novo grant for the non-invasive destruction of liver tumors in 2023, the company has progressed beyond initial market entry into commercial expansion, reimbursement momentum, and ongoing clinical and pipeline development. In addition to its current liver tumor indication, HistoSonics is pursuing future indications across multiple applications including kidney, pancreas, prostate, neuro, women’s health, and other significant underserved human health areas, to realize the broader potential histotripsy across multiple disease states and medical specialties. The Senior Director, Information Systems and Security is responsible for building and scaling a sustainable, in‑house IT and Information Security organization, including team structure, operating models, and long‑term strategy to support continued business growth. This role provides enterprise leadership and oversight of the Information Security and Privacy System (ISPS), ensuring cybersecurity, privacy, and regulatory compliance initiatives aligning corporate objectives and risk tolerance. Serving as the primary leader accountable for technology risk, resilience, and scalability, the Sr. Director owns and drives the infrastructure, platforms, and support systems required to enable secure operations and rapid global expansion across corporate systems and cloud‑connected technologies.

Requirements

Bachelor’s degree in Information Technology, Computer Science, or a related field.
10+ years of progressive experience in IT and/or Information Security, including at least 5 years in a senior leadership role.
Demonstrated success designing, scaling, and leading IT and Information Security organizations in high‑growth, regulated environments.
Broad technical expertise across enterprise IT infrastructure, cybersecurity, and regulatory compliance, with strong knowledge of ISO 27001, HIPAA, and GDPR.
Strategic business acumen with the ability to translate complex technology and risk concepts into clear business impact for executive and non‑technical stakeholders.
Proven organizational leader with strong team development capabilities, financial discipline, and resource prioritization skills.
Highly influential change leader who builds alignment across diverse stakeholders, balances long‑term vision with near‑term execution and drives accountability and outcomes in ambiguous environments.
Exceptional communicator with the presence and credibility to engage executive leadership.

Nice To Haves

MBA or Master’s in Information Systems preferred.
Experience in medical device, healthcare, or other regulated industries preferred.
CISSP, CISM, or ITIL certifications preferred.
Proficiency with Microsoft 365, Azure, and enterprise‑level ERP systems preferred.

Responsibilities

Develop and execute an enterprise IT/IS strategy that supports corporate growth, product commercialization, and global expansion.
Partner with leadership to ensure technology investments drive operational efficiency and competitive differentiation.
Provide leadership and oversight of the Information Security and Privacy System (ISPS).
Lead the ISPS committee and provide integrated reporting on cybersecurity and privacy risk posture.
Establish technology governance that balances agility with regulatory compliance and scalability.
Develop and execute a staffing and capability roadmap aligned with business priorities and growth trajectory.
Ensure technology and security strategy evolves proactively with regulatory, product, and business requirements.
Implement scalable management practices, performance metrics, and communication cadences.
Oversee the implementation and management of enterprise systems, including ERP, CRM, QMS, and productivity platforms.
Ensure IT capabilities align with product security, cloud platforms, and connected device ecosystems.
Implement initiatives that improve operational effectiveness and data-driven decision-making.
Evaluate emerging technologies and industry trends to inform strategy and drive innovation.
Oversee the design and management of secure, scalable IT infrastructure across all locations.
Ensure high availability of critical systems, including Microsoft 365, network infrastructure, and cloud services.
Manage robust disaster recovery capabilities, including regular testing and performance reviews.
Champion ongoing optimization and scalability of enterprise platforms to meet expanding commercial and operational needs.
Provide leadership for cybersecurity strategy, threat management, and vulnerability programs.
Maintain accountability for compliance with ISO 27001, 27701, HIPAA, and GDPR.
Make informed risk-acceptance decisions and allocate resources effectively for mitigation initiatives.
Lead and develop a high-performing IT/IS organization, fostering a culture of accountability and collaboration.
Manage the IT/IS budget to ensure cost-effectiveness and alignment with company goals.
Oversee key vendor contracts, negotiations, and performance evaluations.