• Own and execute the organization’s security strategy, including incident response, vulnerability management, and threat detection • Lead HIPAA compliance initiatives by conducting risk assessments and implementing required security controls • Develop and maintain security policies, procedures, and documentation, including the Security Incident Response Plan • Conduct breach risk assessments and manage notification procedures in compliance with HIPAA requirements • Maintain the Security Incident Register and ensure proper documentation of all security events • Oversee IT infrastructure including MDM, identity management, endpoint protection, and network security • Manage the transition from BYOD to company-owned devices, implementing secure device lifecycle management • Implement and manage SSO, MFA, and privileged access management across the organization • Ensure business continuity through disaster recovery planning and regular testing • Develop and enforce contractor security policies and vendor security assessment frameworks • Manage vendor relationships for security tools, MDM platforms, and IT services • Conduct Business Associate Agreement reviews and ensure vendor HIPAA compliance • Hire, mentor, and manage the IT Systems Administrator and IT Security Administrator • Report on security posture, incidents, and compliance status to executive leadership and the board • Lead security awareness training programs for all employees • Coordinate with engineering leadership on secure development practices and DevSecOps integration