> Markdown version of [/jobs/ext/243049-director-it-and-security](https://www.wearedevelopers.com/jobs/ext/243049-director-it-and-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Director, IT and Security - **Company:** Oasis Health Partners, Inc. - **Location:** Chicago, IL, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Microsoft Azure, Cyber Security, Microsoft Security Essentials, Generative AI - **Published:** May 16, 2026 - **Apply:** https://find.jobs/jobs-near-me/director-it-and-security-chicago-illinois/2771654238-2/ ## About the Role * You have a college diploma and ten years' experience leading IT in healthcare organizations * Knowledge of virtual network infrastructure in Azure or other cloud platforms (security groups, vnets, subnets, firewalls, etc.) * Working knowledge of HIPAA, SOC-2 and HITRUST requirements across the enterprise * At least 8 years of experience supporting healthcare information security, privacy, compliance, or IT risk management programs, including hands-on experience with HIPAA Security, Privacy and Breach Notification Rule requirements * At least 5 years of experience performing or managing vendor security risk assessments, including review of service provider security controls, data protection practices, and risk remediation activities ## Description You are an experienced IT leader with a passion for healthcare. You help organizations innovate and have a background supporting hardware and software infrastructure. You bring strong experience managing healthcare security, privacy and compliance obligations, including the protection of PHI across modern cloud, SaaS and endpoint environments., The Director, Information Technology and Security is responsible for ensuring Oasis's business functions are supported with appropriate software and hardware. You will interface with our managed services provider (MSP) to determine and manage the types of devices our employees receive. The Director must also assess, select and implement new software/technology solutions in support of the organization. This includes performing vendor security risk assessments for new service providers and helping ensure that third-party technologies meet Oasis's security, privacy and compliance expectations. You play a critical role in ensuring that Oasis follows best practices for security and compliance. You will develop and implement controls to protect sensitive and confidential information. You will also help manage requirements related to the HIPAA Security, Privacy and Breach Notification Rules, including the implementation of safeguards, risk management practices and incident response processes that support the protection of PHI. Over the next several years, the Director, IT and Security will have an opportunity to: * Create a secure and scalable technology platform * Recruit and lead an incredible team of technology/engineering professionals * Develop and implement appropriate controls for HIPAA, SOC-2 and HITRUST * Develop and mature vendor security risk management processes for new and existing service providers * Strengthen Oasis's Microsoft security and compliance capabilities across Azure and Microsoft 365 * Establish and maintain controls to reduce the risk of PHI exfiltration through approved and unapproved egress points, including GenAI tools * Enable the success of the Oasis Health technology platform by supporting our internal and external team * Develop Oasis's IT delivery standards and create best practices ## Related Videos - [ZEISS & Microsoft - Building the Next Generation Medical Ecosystem in the Cloud](https://www.wearedevelopers.com/videos/424-zeiss-microsoft-building-the-next-generation-medical-ecosystem-in-the-cloud) - [Your imaginations is (no longer) the limit: how Generative AI empowers people to be creative](https://www.wearedevelopers.com/videos/741-your-imaginations-is-no-longer-the-limit-how-generative-ai-empowers-people-to-be-creative) - [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [The shadows that follow the AI generative models](https://www.wearedevelopers.com/videos/624-the-shadows-that-follow-the-ai-generative-models) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)