Description:
Position Summary:
The Director of Information Technology (Director of IT) is a working leader responsible for the strategic direction and day-to-day operation of Mountain Laurel Medical Center's information systems. The Director of IT directs department efforts, leads project planning, and delivers technology solutions that support the mission, vision, and strategic plan of Mountain Laurel Medical Center. This role oversees IT staff and applications while remaining hands-on in the execution of technology projects, upgrades, and cybersecurity initiatives.
The Director of IT also serves as the organization's HIPAA Security Officer, ensuring that Mountain Laurel Medical Center safeguards electronic protected health information and remains compliant with the HIPAA Security Rule and related requirements.
Essential Duties and Responsibilities
Department Operations
-
Provide oversight of all IT applications, IT staff, and IT implementations to achieve corporate goals.
-
Oversee application selection, configuration, integration, implementation, upgrades, and purchases.
-
Maintain oversight of the organization's IT inventory, including hardware, software, and licenses.
-
Ensure system availability, performance, and timely incident resolution.
-
Manage IT vendor relationships, contracts, service expectations, licensing, and performance to ensure effective and cost-conscious technology support.
-
Participate in infrastructure-related discussions (e.g., renovations, construction, new sites) to provide technology perspectives and ensure optimal effectiveness and efficiency.
Project Management for Electronic Technologies
-
Lead and manage projects for the organization's electronic technologies, including electronic health record (EHR) and related clinical and business systems.
-
Provide end-to-end project management for software and system implementations, including planning, process design, training, and go-live support.
-
Coordinate with clinical and administrative stakeholders to deliver solutions on time and within scope.
-
Track project progress, risks, budgets, and outcomes, and communicate status to leadership.
-
Evaluate new and emerging electronic technologies for consideration, discussion, and implementation.
Cybersecurity, Data Governance, Analytics & AI
-
Implement and enforce cybersecurity controls, policies, monitoring practices, and incident-response procedures across the organization.
-
Oversee technology risk assessments, vulnerability management, system access, data security, backups, disaster recovery, and business-continuity readiness.
-
Lead data-governance efforts, including data quality, integrity, access, reporting standards, validation, and organizational analytics priorities.
-
Coordinate the development and validation of reports, dashboards, and analytics used for clinical, operational, financial, and strategic decision-making.
-
Establish organizational AI governance and coordinate the responsible evaluation, adoption, monitoring, and use of AI-enabled technologies.
-
Direct internal staff and manage qualified vendors or consultants providing specialized cybersecurity, analytics, data, or technical AI services.
Strategic Management
-
Contribute to strategic technology planning for the organization.
-
Organize, develop, and direct the overall strategic and daily operations of IT functions.
-
Serve as a key liaison between leadership and stakeholders, ensuring seamless communication across the organization on technology matters.
-
Recommend short- and long-term IT goals and objectives aligned to strategic priorities.
Security Officer
-
Function as the organization's HIPAA Security Officer.
-
Implement, maintain, and oversee administrative, physical, and technical safeguards for electronic protected health information (ePHI) in accordance with the HIPAA Security Rule.
-
Conduct and document periodic security risk assessments and drive remediation of identified risks.
-
Lead the development, implementation, review, and maintenance of security-related policies, procedures, training, complaint processes, and required documentation.
-
Lead technical incident response and promptly coordinate with the Compliance Officer regarding potential privacy or security incidents.Support the Compliance Officer in breach-risk assessment, notification, regulatory reporting, and required documentation.
-
Support workforce training and awareness on information security practices.
-
Partner with the Compliance and Privacy functions and General Counsel/CEO as needed on security matters.
-
Upholds the Code of Ethics and mission of Mountain Laurel Medical Center in a manner consistent with the core values of patient focused, respect, accountability, teamwork, continuous improvement, and integrity.
May require work outside of usual business hours, including evenings or weekends, to handle upgrades to the IT infrastructure, testing, or other projects as requested.
Requirements:
Qualification Requirements
The successful candidate will have a demonstrated work record showing good attendance, punctuality, dependability, and the ability to work as a member of a team with leadership and co-workers in an appropriate professional manner. Must have strong communication, planning, and organizing skills, and must possess the ability to multi-task and demonstrate great attention to detail.
Education and Experience
-
Bachelor's degree in Computer Science, Information Technology, or a related field is preferred; equivalent experience will be considered in lieu of a degree.
-
Demonstrated experience leading IT operations, staff, and technology projects.
-
At least three (3) years of experience supporting an EHR product suite, with supervisory experience and sound decision-making.
-
Experience in a health care setting, or strong working knowledge of electronic health record systems, data analysis, and report writing.
-
Experience with SQL and Google platforms; formatting data and performing summary statistics.
-
Cybersecurity experience and data analytics experience strongly preferred.
-
Working knowledge of the HIPAA Security Rule and healthcare information security requirements; relevant security certification a plus.
Computer Literacy
-
Must be proficient in Google applications.
-
Must be able to learn new systems quickly.
-
Must be able to access web-based programs safely and securely.
Travel and Training
-
Must be willing to travel locally to Mountain Laurel Medical Center's various sites and its communities.
-
Must be willing to attend employer-paid training and conferences (online or in-person, out of town).
