المسمى الوظيفي

About Pacific Health Group

Pacific Health Group is dedicated to serving communities with compassion, respect, and individualized care, focusing on behavioral health and social supports to help people achieve healing and stability without judgment.

Our Core Values

Communicate with integrity: honest, transparent, and respectful interactions
Innovate by embracing new ideas and continuously improving care
Accept accountability and document accurately
Foster empathy and cultural sensitivity in all relationships
Lead with trust through consistency and transparency
Celebrate achievements both individually and collectively
Collaborate purposefully across departments and with community partners
Offer and request support to thrive as a team and serve members better

Role Overview & Impact

The IT Manager for Information Technology & Information Security takes full responsibility for all IT systems and data security, ensuring compliance with HIPAA, HITECH, and related regulations. This role oversees IT infrastructure, enforces security policies, and protects sensitive health information and overall operational integrity within a regulated healthcare environment.

Key Responsibilities

Design and maintain a comprehensive, company-wide Information Security Program
Set and enforce security controls across applications, infrastructure, devices, and user access
Develop policies covering data classification, encryption, access, logging, monitoring, and retention
Implement least-privilege and zero-trust security models
Continuously track and respond to emerging security threats
Act as the organization's lead authority on HIPAA Security and Privacy Rule compliance
Safeguard protected health information (PHI) in storage, transmission, and disposal
Maintain compliance documentation including risk assessments and audit records
Lead HIPAA risk analysis and remediation efforts
Manage security aspects of Business Associate Agreements (BAAs)
Coordinate and facilitate internal and external audits, assessments, and investigations
Conduct regular disaster recovery and business continuity testing
Oversee IT systems design, deployment, and maintenance including cloud services, networks, endpoints, SaaS, and internal tools
Ensure system security, reliability, scalability, and performance
Implement backup, disaster recovery, business continuity, and redundancy strategies
Approve technology deployments and infrastructure changes
Supervise hardware, software, and telecom lifecycle management
Develop formal cybersecurity incident response plans and manage incident investigations
Lead response to security breaches, phishing, data exposures and conduct root cause analyses
Maintain logging and monitoring systems to detect suspicious activities
Define controls to protect sensitive data, PHI, and business confidential information
Ensure encryption for data at rest and in transit and govern data access policies
Collaborate with legal and compliance on privacy matters
Vet third-party vendors for security and compliance, monitor ongoing risks, and manage access
Create, implement, and enforce IT and security policies organization-wide
Deliver security awareness training focused on phishing prevention and protocol adherence
Address policy violations, oversee escalation and disciplinary procedures
Provide leadership, direction, and evaluations for IT staff
Develop strategic IT and security roadmaps aligned with organizational goals
Report regularly to executives on security posture, risks, compliance, and progress
Advise leadership on IT risk management, necessary investments, and operational balance

Qualifications

Proven experience leading IT, cybersecurity, or information security initiatives
Expertise in HIPAA regulations and healthcare data security
Solid knowledge of cloud security, endpoint protection, and identity and access management
Experience establishing security policies and compliance frameworks from inception
Ability to work autonomously with high accountability
CISSP, CISM, or similar certifications preferred
Background in healthcare or highly regulated sectors is advantageous
Experience managing compliance audits, risk assessments, and formal security programs
Familiarity with NIST, ISO 27001, or equivalent security frameworks is a plus

Authority & Accountability

Authority to approve or reject technology tools, vendors, and system access
Oversee enforcement of security policies across the entire organization
Accountable for the protection of company data, systems, and regulatory compliance

Compensation and Work Details

This full-time role is based in a hybrid work setting requiring frequent local travel within San Diego County. The preferred residence is near Rancho Bernardo, Poway, Rancho Peñasquitos, or Scripps Ranch areas. Annual salary ranges between $78,500 and $82,500, determined by experience and qualifications. This position reports directly to the CEO.

Benefits

Paid time off, holidays, volunteer time, and bereavement leave
Medical insurance options including FSAs and employee assistance programs
Disability coverage
401(k) retirement plan and financial stipends
Opportunities for professional development and career growth
Employee discounts and team events fostering a positive work culture

Equal Opportunity Employer Statement

Pacific Health Group is committed to building an inclusive workplace that respects diversity and promotes equity. All qualified candidates will be considered regardless of race, religion, gender, sexual orientation, disability, age, veteran status, or any legally protected status. Applications from underrepresented communities are strongly encouraged.

Hiring Process and Legal Disclaimer

Employment offers require meeting qualifications and successful completion of mandated recruitment stages including an internal application, screening, assessments, manager interviews, and official offers from authorized representatives. Pacific Health Group warns against unauthorized communications outside the official process.

IT Manager - Information Technology & Information Security

مكان عملك