Vice President & Chief Information and Security Officer-Executive

Person Centered Services•Buffalo, NY

About The Position

The Vice President of Information Technology for Person Centered Services provides technology vision and leadership in developing and implementing the portfolio of company-wide information technology (IT) platforms and services that support both distributed and centralized clinical and business operations. The VP ensures organizational compliance with state and federal information security regulations and serves as the Chief Information and Security Officer. The VP collaborates with business unit leaders across the organization to develop a detailed understanding of their issues, challenges, and opportunities, and provides the strategic technical guidance and computing capabilities necessary to support the company’s strategic plans and achieve business success. Alongside service excellence, the VP OF IT brings deep, hands-on knowledge of cloud infrastructure Azure, Microsoft 365, and hybrid environments to guide the organization's continued modernization of its technical platform. This includes cloud security architecture, Social Care Network and clinical application hosting, disaster recovery, and the infrastructure that underpins HIPAA compliance, New York State OPWDD, NYS DOH OHIP Moderate-Plus Security Controls Baseline v5 compliance, and the organization's security posture.

Requirements

Knowledge in systems design and development processes, including requirements analysis, feasibility studies, software design, programming, user acceptance testing, installation, evaluation, and operational management.
Knowledge of regulatory compliance and controls including NIST 800-53, HIPAA, HITECH, and NYS DOH OHIP Moderate-Plus Security Controls Baseline v5.
Familiarity with the design, management, and operation of Health IT systems
Proven ability to lead vendor selection initiatives, manage strategic vendor relationships, and negotiate complex contractual arrangements.
Proven ability to link and apply complex technologies to business strategies
Team builder and team player
Self-motivated
Focus on results
Critical thinking and decision-making skills
Bachelor’s degree in Business Administration, Information Technology or other related field required
Information Security Certification (one of the following) required -Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), CompTIA Security+
7- years of technology leadership experience, required
Knowledge of electronic client records required

Nice To Haves

Master’s degree strongly preferred (MIS, MBA, MPA, or Health Informatics)
Healthcare or human services experience preferred
Experience working with Boards preferred

Responsibilities

Accountable for defining and delivering IT strategy and capabilities across the organization, business process automation through application development and support, a high-availability computing infrastructure, regulation-compliant information security, and all other technical services.
Develop and execute a phased ITIL 4 implementation roadmap with defined milestones, resource requirements, staff training plans, and measurable outcomes
Implement a Problem Management practice: identify recurring incidents, conduct root cause analysis, and drive permanent fixes rather than repeated workarounds. Track problem records and elimination of known errors in the organization's CMDB.
Deploy and maintain a Configuration Management Database (CMDB) providing a single authoritative source of truth for all IT assets, software licenses, system dependencies, and service relationships.
Implement a Knowledge Management system — internal IT knowledge base, documented runbooks, standard operating procedures, and self-service resources — reducing staff dependency on individual IT personnel and improving first-contact resolution rates.
Oversee Information Security, ensuring security is a design criterion in all IT projects, cloud architectures, and vendor selections.
Interpret and implement the NYSDOH System Security Plan (SSP) control framework and ensure compliance with the NYS DOH OHIP Moderate-Plus Security Controls Baseline v5related to Medicaid confidential Data and the NYSDOH Data Use Agreement (DUA) related to Medicaid confidential Data.
Maintain current documentation of all systems, data flows, cloud configurations, and vendor Business Associate Agreements.
Ensure all IT systems maintain compliance with HIPAA/HITECH, the January 2025 HIPAA Security Rule update, the New York SHIELD Act (30-day breach notification), 42 CFR Part 2, NYS DOH OHIP Moderate-Plus Security Controls Baseline v5, and applicable NYS OMH and OASAS regulations.
Establish and oversee the adherence to policies and procedures that protect the identities of individuals served in accordance with HIPAA privacy and security rules.
Own the technical implementation of approved security controls: multi-factor authentication (MFA) for all users and systems, Entra ID identity governance, endpoint detection and response (EDR) via Microsoft Defender, data loss prevention (DLP) policies, and privileged access management (PAM).
Ensure all ITIL Change Management processes incorporate a security review step: no change to production systems proceeds without assessment of security implications by the CIO and Director of Information Security.
Define and report on IT KPIs and service metrics to executive leadership, in areas such as Mean Time to Resolve (MTTR), First Contact Resolution (FCR) rate, SLA compliance by service tier, customer satisfaction (CSAT), and system availability percentages.
Provide IT team leadership, supervision, and coaching, and continually assess and manage internal resources and outsourced functions.
Engage in team building and team engagement across team members, requesting and assessing feedback and working to increase team member and leadership efficiency, engagement and satisfaction.
Directly supervise and provide professional development to the IT Project and Relationship Manager, the Manager of IT Security and the Manager of IT Operations.
Develop departmental goals and initiatives, including a future looking vision for the Company’s IT services focused on best practices, efficiency, and cost containment.
Formulate IT policies, procedures, and performance management process and measures.
Collaborate with other departments (QA/CC, LRA, HR, etc.) to ensure company overall compliance with IT policies and procedures.
Negotiate and/or review complex contracts with vendors of the IT Department and vendors of other Departments where IT knowledge is required, and authorizes procurement, within company processes and resource limits.
Ensure all Person Centered Services employees receive quality, consistent, available computer services, technical support, and training in conjunction with the Learning and Development team.
Develop IT department annual budget in collaboration with other senior leaders and administer funds according to budget approval.
Collaborate with Security and IT leads in the OPWDD CCO/HH network to maximize resource review and potential shared expertise.
Maintain deep knowledge of technology and industry trends. Make recommendations to the executive and senior leadership team for new technology solutions or updates to existing tools.
Participate in company strategic planning process.
Commits to a respectful, just, and supportive environment for all individuals and team members aligning with the organization’s commitment to inclusion and belonging. As a leader, sets and promotes a culture focused on inclusion and belonging in all business practices. This includes actively seeking, hiring, and developing talented candidates and appropriately and fairly addressing issues related to inclusion in all interactions with team members.
Other duties as necessary or assigned.