VP of IT

The Vice President of Information Technology builds and leads the infrastructure, security, business systems, data governance, and vendor-management capabilities supporting eMed’s fast-growing, multi-market digital health business. This is a hands-on leadership role responsible for secure and reliable corporate technology, HIPAA/HITECH and broader security compliance, enterprise client technical diligence, and scalable IT operations. The VP partners across Engineering, Legal, Clinical, Finance, Commercial, and Operations to protect sensitive information, enable growth, and reduce technology and operational risk., IT Strategy & Infrastructure

• Own eMed’s IT strategy, roadmap, operating model, and budget, aligning investments with business priorities and international expansion.
• Oversee device management, networking, telephony, identity and access management, workplace technology, and service delivery across locations.
• Build scalable, well-documented processes and service standards that support growth without proportional increases in cost or headcount.

Security, Compliance & Privacy

• Own HIPAA/HITECH security compliance and protection of PHI, including security controls, breach-response readiness, and the vendor Business Associate Agreement program.
• Lead security strategy, policies, operational controls, vulnerability management, incident response, and third-party risk management.
• Maintain readiness for relevant frameworks and certifications, including SOC 2 Type II, HITRUST, ISO 27001, Cyber Essentials Plus, NHS DSPT, and applicable privacy requirements.
• Partner with Legal, Clinical, and Engineering on privacy impact assessments, data residency, retention, classification, and access-control standards.

Business Systems & Vendor Management

• Own the strategy, administration, and integration of core business systems, including collaboration, finance, CRM, HR, analytics, and productivity platforms.
• Lead vendor selection, commercial negotiations, performance management, renewals, and rationalization, balancing cost, reliability, security, and usability.
• Evaluate and implement systems needed for new markets, business models, brands, and strategic partnerships.

Enterprise Client Onboarding & Due Diligence

• Lead the technical and security workstream for onboarding large employers, insurers, health systems, and other enterprise partners.
• Own enterprise security questionnaires, RFP responses, vendor risk assessments, and a current, reusable library of security and audit evidence.
• Partner with Commercial and Legal on BAAs, data-processing terms, service levels, security addenda, and repeatable technical onboarding playbooks.

Business Continuity, Risk & Team Leadership

• Own IT disaster recovery and business continuity planning, testing, remediation, and continuous improvement.
• Maintain the IT and security risk register and provide clear reporting to executive leadership and the Board as required.
• Build, mentor, and lead a high-performing IT organization, and serve as a trusted advisor on technology risk, investment, and capability.

Success Metrics

• Enterprise system availability, service levels, employee experience, and incident resolution performance.
• Security posture, audit and certification outcomes, vulnerability remediation, and reduction of material risk.
• Compliance with HIPAA/HITECH, privacy, data-governance, and market-specific requirements.
• On-time enterprise client diligence and technical onboarding with minimal reliance on ad hoc engineering support.
• Vendor performance, cost optimization, systems adoption, and successful business-system implementations.
• Business continuity and disaster recovery test results, readiness, and remediation completion.

• 12+ years of progressive IT leadership experience, including senior ownership of infrastructure, information security, business systems, and service delivery.
• Hands-on experience with HIPAA/HITECH compliance and PHI security in a U.S. healthcare, digital health, or health technology environment.
• Track record leading security programs and relevant frameworks such as SOC 2, HITRUST, ISO 27001, or equivalent.
• Experience supporting enterprise security diligence, client onboarding, and complex technology or software vendor relationships.
• Strong knowledge of identity and access management, endpoint security, cloud and SaaS environments, data governance, incident response, and business continuity.
• Ability to translate technical risk into clear business implications for executives and the Board.
• Demonstrated success building teams and processes in a lean, fast-moving, multi-entity environment.

Preferred

• Experience with international operations and frameworks such as GDPR, NHS DSPT, DTAC, Cyber Essentials Plus, or Germany-specific data requirements.
• Experience negotiating and managing BAAs and security terms with large employers, health plans, health systems, or other enterprise clients.
• Experience supporting major partnerships, acquisitions, new-market launches, or investor and customer due diligence.

Pulled from the full job description

• AD&D insurance
• Health insurance
• 401(k) matching
• Paid time off
• Vision insurance
• Dental insurance
• Life insurance, * Health Care Plan (Medical, Dental & Vision)
• Retirement Plan (401k with Company Match)
• Life Insurance (Basic, Voluntary & AD&D)
• Paid Time Off
• Short Term & Long-Term Disability
• Training & Development
• Catered breakfast and lunch daily, snacks
• Wellness Resources

pAVNOP0rhG

eMed is a digital health company headquartered in Miami, Florida, redefining how individuals and enterprise clients access healthcare solutions at scale. Operating at the intersection of diagnostics, technology, and enterprise wellness, eMed partners with employers, insurers, and health systems to deliver streamlined, tech-enabled healthcare services. As eMed accelerates its growth, expands internationally, and extends its at-home care platform to additional chronic conditions, our teams are building secure, scalable, and intuitive experiences for patients, clients, and partners.