Petaluma Health Center's mission is to provide high quality health care with access for all in Southern Sonoma County & West Marin. We pride ourselves on our Patient-Centered care while maintaining an engaging environment for our staff. The Center accomplishes this mission through collaborative, innovative programs, services and referral resources that meet the economic needs of the entire community.
FULL TIME EMPLOYEE BENEFITS:
-
21 Days of Paid Time Off
-
10 Observed Holidays
-
Medical Insurance (Entire deductible paid by us!)
-
30 Chiropractor and Acupuncture visits per year included with enrollment in our health insurance plans (Kaiser and WHA)
-
Dental Insurance
-
Vision Insurance
-
Gym Membership Discounts at Active Wellness Center and 24-Hour Fitness!
-
401K Matching after 1 year of employment
-
Flexible Spending Account, Dependent Care FSA
-
Life Insurance (included at no cost to the employee)
-
Long Term Disability (included at no cost to the employee)
-
Employee Assistance Program (included at no cost to the employee)
Summary: Petaluma Health Center (PHC) is a community-based Federally Qualified Health Center
committed to providing high-quality, patient-centered care to our community. The Chief Technology
Officer (CTO) is responsible for ensuring that PHC’s technology environment reliability, securely, and effectively supports clinical care delivery, staff operations, and organizational sustainability and
innovation.
As a member of the Senior Leadership Team, the CTO provides executive leadership for all technology functions, including information systems, infrastructure, cybersecurity, and enterprise applications. This role establishes technology strategy and governance while maintaining direct accountability for operational performance, security posture, regulatory compliance, and risk management.
The CTO oversees PHC’s electronic health record environment (EPIC through OCHIN), network and systems operations, cybersecurity, and the broader application ecosystem. This position works closely with the Board of Directors, executive leadership, clinical leaders, and operational teams to ensure technology enables care delivery rather than creating barriers.
Areas of Responsibility:
Executive Leadership & Strategy
-
Develop and maintain a multi-year technology strategy aligned with PHC’s mission, clinical
priorities, growth plans, and financial realities. -
Serve as the executive leader accountable for technology outcomes, risks, and investments.
-
Advise the CEO and executive leadership team on technology opportunities, constraints, and
tradeoffs. -
Present technology plans, risk, and performance metrics to senior leadership and the Board as needed.
Technology Governance & Risk
-
Establish and enforce enterprise technology governance, including
o Cybersecurity governance and risk management
o Application and integration governance
o Data access, privacy, and retention standards
o Vendor and contract oversight -
Ensure technology systems, data governance, and security controls support compliance with
HIPAA, HITECH, 42 CFR Part 2, applicable California state privacy laws, and all HRSA program requirements, including UDS reporting, FTCA risk management, and grant compliance obligations. -
Lead business continuity planning, disaster recovery strategy, and incident response
preparedness. -
Act as the executive owner of technology risk, ensuring issues are surfaced early and addressed proactively.
Clinical Systems & Applications
-
Provide executive oversight of the EHR environment in partnership with OCHIN, ensuring PHC-owned workflows, integrations, security responsibilities, optimization priorities, and change management processes are clearly defined and governed.
-
Oversee PHC’s profile of clinical, operational, and administrative applications, ensuring:
o Clear system ownership and accountability
o Lifecycle management and documentation
o Secure and reliable integrations
o Reduction of unnecessary redundancy and risk -
Support data availability and system reliability, in coordination with informatics and
administration, for quality reporting, compliance, and operational decision-making.
Infrastructure, Network & System Operations -
Oversee Network Operations, Helpdesk, and System Operations to ensure
o Reliable, high-availability technology services
o Predictable response and resolution workflows
o Clear escalation paths and accountability
o Positive staff experience with technology support -
Ensure technology infrastructure supports multi-site clinics, mobile services, telehealth, and
administrative operations. -
Balance capital and operating investments to maintain systems reliability while managing cost.
Cybersecurity
-
Lead and oversee PHC’s cybersecurity program, including prevention, detection, and response.
-
Ensure ongoing risk assessments, vulnerability management, and staff security training.
-
Oversee security monitoring, incident response, and remediation efforts.
-
Report cybersecurity posture and incidents to executive leadership and the Board as
appropriate.
People & Organizational Leadership
-
Directly supervise the Director of IT and provide executive oversight of Network Operations,
System Operations, and cybersecurity leadership. -
Establish clear expectations, accountability, and performance metrics across all technology
teams. -
Support staff development, succession planning, and retention within technology roles.
-
Foster strong collaboration with Clinical, Operations, Finance, Administration, Compliance, and Human Resource teams.
Desired Skills:
-
Proven executive experience leading and developing technology organizations through
managers and directors, with accountability for operations, security, and performance. -
Demonstrated ability to set and execute enterprise technology strategy aligned with
organizational mission, clinical priorities, and financial constraints. -
Experience establishing and governing cybersecurity, application, data, and vendor management frameworks in a regulated environment.
-
Strong understanding of healthcare technology risk, privacy, and security requirements, with the ability to translate technical risk into business and clinical impact.
-
Experience overseeing complex, multi-site technology environments with high availability,
uptime, and incident response expectations. -
Working familiarity with large IT ecosystems, including or similar to electronic health records,
enterprise infrastructure, and cloud services. -
Ability to lead through influence and partnership across clinical, operational, and administrative teams.
-
Clear, confident communicator with experience advising executive teams and Boards on technology strategy, investment, and risk.
-
Strong alignment with a mission-driven, community health environment and a service-oriented leadership mindset.
Education and Experience:
-
Bachelor’s degree in Information Systems, Computer Science, Business Administration, or a
related field required. -
Master’s degree in a related field preferred.
-
Minimum of 10 years of progressive responsible experience in information technology, including senior leadership roles.
-
Demonstrated experience in healthcare IT, community health, hospital systems, healthcare
adjacent industries preferred. -
Demonstrated experience as an IT leader in a cohesive service-based industry required.
-
Experience overseeing enterprise infrastructure, service-based systems, cybersecurity, and
multi-application environments required. -
Strong working knowledge of technology regulations and compliance requirements.
-
Proven ability to manage both strategic initiatives and day-to-day operational accountability.
-
Experience working with a large-scale electronic health record in a multi-site or geographically distributed healthcare system preferred.
Language Skills: Ability to effectively present information and respond to questions and requests from providers, co-workers, and others as necessary.
