EMPLOYEE RISK FACTOR:III
Performs tasks that do not routinely involve exposure to blood, body fluids or tissues, and are not called on to perform or assist in emergency medical care or first aid to be potentially exposed in any other way as a condition of employment.
SUMMARY:
The Information Systems (IS) Director provides strategic leadership and operational management for the organization’s information technology infrastructure, cybersecurity, telecommunications, business intelligence, and electronic health record (EHR) systems. This position is responsible for ensuring secure, reliable, and compliant technology operations that support patient care, organizational growth, regulatory requirements, and business objectives. The IS Director develops and manages IT strategic plans, budgets, projects, policies, and procedures to align with organizational goals and HRSA requirements.
The role leads the planning, implementation, and optimization of agency wide technology solutions that support both clinical and business operations. Working closely with executive leadership, the Administrator leverages technology, data analytics, and information management systems to improve organizational efficiency, decision-making, service delivery, cost-effectiveness, and quality healthcare outcomes in a dynamic and competitive healthcare environment. The position also oversees technology-related compliance initiatives and performs advanced systems analysis while providing leadership for ongoing innovation and continuous improvement across all IT functions.
SUPERVISION RECEIVED:
1. Chief Human Resources and Compliance Officer
2. CEO
SUPERVISION EXERCISED:
1. IT Staff
ESSENTIAL DUTIES AND RESPONSIBILITIES:
Professional Competence:
- Must display and set the example with excellent customer service skills, common courtesy maintaining eye contact and displaying active listening skills towards clientele, staff, funders and the general public at all times.
- Demonstrates a commitment to exceptional customer service by interacting with clients, staff, funders, and members of the public in a professional, respectful, and responsive manner.
- Provides strategic and tactical planning, development, evaluation, and coordination of the information and technology systems for VAC.
- Ensures continuous delivery, operation of integrated clinical and administrative information systems.
- Develops a budget for information and technology operations consistent with goals of VAC.
- Responsible for the recruitment, development, motivation and retention of assigned staff conforming to budgetary objectives and personnel policies.
Organizational Support:
- Provide leadership and oversight for the organization’s information and communication systems.
- Collaborate with staff and leadership on technology initiatives, system improvements, and patient management systems.
- Ensure compliance with healthcare technology standards and regulations, including HIPAA, Medicare/Medicaid, interoperability, and other applicable requirements.
- Partner with executive leadership to develop, provide technical leadership and implement IT strategies that support clinical, operational, and business objectives.
- Evaluate, implement, maintain, and optimize information systems and technology solutions.
- Manage technology vendors, software licensing, contracts, service agreements, and procurement activities according to established policies, regulations and copyrights.
- Advise leadership on technology trends, risks, opportunities, and best practices.
- Communicate IT plans, policies, and technology updates across the organization.
Information System Quality Improvement & Project Management:
- Lead and oversee information systems projects, including system selection, implementation, upgrades, and maintenance.
- Develop and maintain IT policies, standards, and procedures to ensure security, compliance, and operational efficiency (appropriate and cost-effective).
- Coordinate with external vendors and partners on system upgrades, audits, cybersecurity, and regulatory compliance.
- Administer and support EHR/EMR systems, ensuring system availability, backups, security, and user support.
- Supports and maintain telehealth platforms, patient portal integrations, and remote access technologies.
- Administer Microsoft 365 services, including Exchange Online, SharePoint, Teams, Intune, and Entra ID as applicable
- Monitor and maintain IT infrastructure, cybersecurity controls, and data protection measures.
- Maintain Active Directory, VPN, and remote user access tools.
Information System Security and Documentation:
- The IS Director will be designated as the Security Officer
- Lead cybersecurity initiatives, risk assessments, and implementation of security controls to protect organizational systems and data.
- As an expert subject matter, develop, maintain, and enforce information security, disaster recovery, and business continuity policies and procedures.
- Manage HIPAA-compliant IT infrastructure, including servers, networks, workstations, mobile devices, and cloud environments.
- Conduct security risk assessments, vulnerability reviews, and coordinate/document remediation activities.
- Administer cybersecurity solutions, including MFA, endpoint protection, SIEM, DLP, and identity access management tools.
- Co-lead security incident response activities, investigations, and breach notification processes.
- Coordinate disaster recovery and business continuity testing to ensure organizational readiness.
- Maintain security documentation, audit records, and compliance reporting.
- Provide cybersecurity awareness training and phishing prevention education for staff.
- Monitor system performance (troubleshooting), security events, and infrastructure health using enterprise monitoring tools.
- Serve as the subject matter expert for security architecture and lead the design, implementation, and maintenance of security controls to protect organizational information systems and data.
- AI Governance: In collaboration with C-suite evaluates, implement, and monitor the use of artificial intelligence and emerging technologies; develop guidelines for responsible use; assess security, privacy, and compliance risks; and provide recommendations to support organizational objectives.
Asset Management Responsibilities:
- Maintain accurate inventory records of all IT hardware, software, mobile devices, and related technology assets.
- Track asset assignments, locations, warranties, licenses, and lifecycle status.
- Coordinate procurement, deployment, replacement, and disposal of IT assets in accordance with organizational policies.
- Monitor software licensing and subscription compliance, ensuring timely renewals and cost-effective utilization.
- Manage equipment onboarding and recovery processes for new hires, transfers, and employee separations.
- Coordinate repairs, warranty claims, and vendor support for IT assets.
- Perform regular asset audits and reconcile inventory records to ensure accuracy and accountability.
- Ensure secure data sanitization and proper disposal of end-of-life equipment in compliance with security and regulatory requirements.
- Generate asset management reports to support budgeting, planning, compliance, and audit activities.
Other Essential Duties and Responsibilities:
- Maintain current knowledge of organizational policies, procedures, and industry best practices.
- Pursue ongoing professional development, training, and certifications related to IT, cybersecurity, and healthcare compliance.
- Ensure compliance with HIPAA, OSHA, and all organizational policies, procedures, and regulatory requirements.
- Participate in performance improvement initiatives, required meetings, and mandatory training programs by VAC or regulatory agencies.
- Attend VAC departmental, organizational meetings and mandatory training.
- Must follow all agency rules and regulations including but not limited to Employee Handbook, safety rules and programmatic requirements.
- Travel between sites as needed to provide IT support and ensure operational continuity.
- Work flexible or extended hours as necessary to minimize system downtime and support critical operations.
- Maintain a flexible schedule Monday - Friday 8:00 am - 5:00 pm, this position will occasionally require non-traditional hours, such as evenings and weekends and extended hours.
- Occasional overnight travel.
- Other duties as assigned and required.
Supervisory Role may include:
- Provides support to staff to ensure standards of care are followed along with agency policies and procedures.
- Meets with Coordinators to assess services, programmatic requirements and assist them with setting up protocols and trainings.
- Provides staff with guidance on a daily basis or as necessary.
- Provides training to new program staff and volunteers and ensures continued train in and growth for current staff.
- Manage performance by giving feedback, documenting issues, and partnering with leadership/HR on corrective actions.
- Handle incidents and concerns promptly, following reporting procedures and maintaining confidentiality.
- Performs administrative duties such as monitor schedule, ensure coverage, approval of PTO and timesheet, overtime request and utilization.
MINIMUM QUALIFICATIONS EDUCATION & EXPERIENCE:
- Bachelor’s degree from an accredited college/university in Computer Science, IT administration, Business Administration or a related field or a Master’s degree in a related field preferred.
- Minimum 7 to 10 years of progressive IT management experience, preferably in a nonprofit healthcare or FQHC environment.
- Minimum 3 years of supervisory experience leading IT teams and technology initiatives.
- Experience administering and supporting EHR/EMR systems and clinical workflows.
- Experience with healthcare information systems, practice management, patient accounting, revenue cycle, and financial management systems.
- Proficiency in data analysis and reporting tools, including Excel, Power BI, and SQL.
- Experience in FQHC, Ryan White, or HIV-focused healthcare settings preferred.
- Relevant IT, cybersecurity, or cloud certifications preferred (e.g., Security+, Azure Administrator, Microsoft 365 Administrator, HCISPP, CHIS).
MINIMUM QUALIFICATIONS- KNOWLEDGE, SKILLS, & ABILITIES:
- Strong ability to communicate technical concepts and data to executive leadership, staff, and non-technical audiences.
- Knowledge of HIPAA, HITECH, HRSA, CDC, and other healthcare regulatory and
- reporting requirements.
- Knowledge of information systems, networking, telecommunications, cybersecurity, cloud technologies, databases, and healthcare IT systems.
- Knowledge of healthcare operations, EHR systems, practice management, patient accounting, revenue cycle processes, and business operations.
- Understanding of healthcare regulations and compliance requirements, including HIPAA, HRSA, Medicare/Medicaid, and interoperability standards.
- Knowledge of system design, implementation, integration, maintenance, and project management methodologies.
- Skill in troubleshooting hardware, software, network, and system issues.
- Experience with reporting, data analysis, budget development, vendor management, and contract negotiations.
- Strong leadership, organizational, project management, and relationship-building skills.
- Ability to analyze business needs and align technology solutions with organizational objectives.
- Ability to develop policies, procedures, and technical standards in a complex healthcare environment.
- Ability to train and support users with varying levels of technical proficiency.
- Ability to manage multiple priorities, work independently, and adapt in a fast-paced, multi-site environment.
SPECIAL REQUIREMENTS/QUALIFICATIONS:
Active State of Texas Class “C” Driver’s License. Must maintain all certifications, licenses and/or registrations consistent with Westbrook Clinic policy and Texas State Law. Maintain required state mandated auto liability insurance at all times. BLS certified. Bilingual English/Spanish desired.
EQUIPMENT USED:
Computing Systems, Hardware, Software, Security & Compliance: Manage and support IT infrastructure, including servers, networks, access control systems, workstations, laptops, mobile devices, backup and virtualization platforms, operating systems, cloud services, cybersecurity tools, monitoring systems, ticketing platforms, compliance solutions, and technology asset management.
PHYSICAL DEMANDS AND WORK CONDITIONS:
- Ability to sit for extended periods and perform tasks requiring manual dexterity and precision.
- Requires normal or corrected vision and hearing.
- Work is primarily performed in an office environment with minimal noise.
- Occasional bending, kneeling, stooping, reaching, and lifting up to 30–40 pounds, with or without assistance.
This job description should not be interpreted as all-inclusive or as an employment agreement between the employer and employee. It is intended to identify the essential functions and requirements of this job and is subject to change as the needs of the employer and requirements of the job change. Incumbents may be required to perform job-related responsibilities and tasks other than those stated in this specification. Any essential functions of this position will be evaluated as necessary should an incumbent/applicant be unable to perform the function or requirement due to a disability as defined by the Americans with Disabilities Act (ADA). Reasonable accommodation for the specific disability will be made for the incumbent/applicant when possible.
Pay: $80,000.00 - $85,000.00 per year
Benefits:
- Dental insurance
- Employee assistance program
- Flexible spending account
- Health insurance
- Life insurance
- Paid time off
- Retirement plan
- Tuition reimbursement
- Vision insurance
Work Location: In person
