> Markdown version of [/jobs/ext/1153200-director-it-security-compliance](https://www.wearedevelopers.com/jobs/ext/1153200-director-it-security-compliance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Director, IT, Security & Compliance - **Company:** PurpleLab, Inc. - **Location:** Wayne, PA, United States - **Experience:** Experienced - **Salary:** $165,000.0 - $185,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, DevOps, Disaster Recovery, Identity and Access Management, Information Technology Operations, Cloud Services, Software Licensing, Reliability of Systems, Information Technology - **Published:** July 2, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=2b2dc770d0c24d69 ## About the Role * Bachelor's degree in Computer Science, Information Technology, Cybersecurity or a related field is required. * 5+ years of experience in IT operations, security, or compliance roles, with at least 2 years in a management or leadership capacity. * Demonstrated experience managing a HiTrust certification program (HITRUST CSF). * Demonstrated experience managing a SOC 2 audit and compliance program. * Experience managing a third-party managed IT services or helpdesk provider. * Strong working knowledge of HIPAA Security and Privacy Rules. * Experience conducting risk assessments and implementing security controls. * Experience with incident response and disaster recovery planning. * Strong understanding of cloud computing security and infrastructure (AWS, Azure, or GCP). * Strong analytical and problem-solving skills. * Excellent communication and interpersonal skills; ability to translate technical risk into business terms. * Experience in healthcare, life sciences, or health data industries strongly preferred. * Relevant certifications (CISSP, CISM, CRISC, HITRUST CCSFP, or equivalent) a plus. ## Description The Director, Information Technology & Security/Compliance is responsible for the day-to-day management of the company's IT operations and security/compliance programs. This includes overseeing the relationship with the company's managed IT service provider, ensuring the security and reliability of IT systems, and leading the company's compliance efforts under frameworks including HIPAA, SOC 2, and HiTrust. This role reports to the VP, Information Technology and serves as the primary operational lead for IT infrastructure and regulatory compliance. * Manage the day-to-day relationship with the company's managed IT service provider, serving as the primary point of contact for service delivery, escalations, and performance management. * Oversee IT operations including cloud operations, endpoint management, and identity and access management. * Lead a group of dev ops and system reliability engineers for cloud operations. * Lead and maintain the company's HiTrust certification program, including gap assessments, remediation tracking, and audit coordination. * Own and manage the SOC 2 compliance program, including evidence collection, control monitoring, and coordination with external auditors. * Develop, implement, and maintain IT security policies, procedures, and controls in alignment with applicable regulatory and contractual requirements. * Conduct and coordinate risk assessments, such as penetration testing; develop and track remediation plans for identified vulnerabilities and gaps. * Manage incident response activities including identification, containment, investigation, and documentation of security events. * Maintain and test disaster recovery (DR) and business continuity plans. * Ensure ongoing HIPAA compliance across systems, processes, and third-party relationships. * Manage IT vendor relationships and contracts, including software licensing, cloud services, and security tooling. * Prepare and maintain compliance documentation. * Perform other duties as assigned to support business needs and company objectives. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Leverage Cloud Computing Benefits with Serverless Multi-Cloud ML ](https://www.wearedevelopers.com/videos/78-leverage-cloud-computing-benefits-with-serverless-multi-cloud-ml) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [ZEISS & Microsoft - Building the Next Generation Medical Ecosystem in the Cloud](https://www.wearedevelopers.com/videos/424-zeiss-microsoft-building-the-next-generation-medical-ecosystem-in-the-cloud) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)