• Lead IT Support for a remotely distributed workforce through implementing ITSM best practices • Fully manage the installation, configuration, and maintenance of physical and virtual assets and serve as the go-to IT resource for company employees • Manage onboarding and off-boarding processes of employees, including computer/hardware procurement, setup, and account provisioning on Apple and Windows Devices. • Create accurate and clear technical, security, and HIPAA-related documentation, develop support playbooks and process governance, own data flow maps and systems inventory • Build and maintain vendor relationships, including tracking vendors, contract terms, security requirements, Business Associate Agreements (BAAs) maintenance, and policies • Oversee and manage the organization's security strategy and initiatives to protect its assets, employees, and stakeholders and ensure compliance with industry standards and regulations • Conduct regular risk assessments to identify potential security and HIPAA vulnerabilities, develop mitigation plans, and lead the response to security incidents, coordinating efforts to minimize impact and recover from breaches • Develop and test business continuity and disaster recovery plans • Own and support the IT, security, and data infrastructure required to maintain HIPAA compliance across the organization as required under HIPAA Security and Privacy Rules • Partner with Legal, People, Operations, and Engineering to ensure appropriate safeguards are in place for the protection of PHI and other sensitive data • Support internal and external audits, security questionnaires, and customer due diligence related to HIPAA and data protection practices • Develop and deliver employee security and HIPAA awareness training in partnership with People Ops and Legal • Assist in investigation and response to potential security or privacy incidents involving PHI, including documentation and remediation tracking • Continuously improve controls and processes to strengthen Sana’s security posture and ensure ongoing HIPAA compliance as the organization scales