Director of Technology

Job Description

Job Description

Hightop Health is seeking a Director of Technology to own all aspects of the company’s technology, including IT infrastructure, cybersecurity, data and reporting platforms, EHR and software administration, vendor and MSP management, technology compliance (HIPAA/HITRUST), and budgeting.

This is a hands-on working leadership role. As the company’s sole internal technology resource initially, the Director will work closely with the CFO, COO, and Operations leadership to manage and hold accountable the external vendors and MSPs who handle infrastructure, help desk, security, and network support, while directly owning and executing responsibilities that fall outside that managed coverage — including EHR and software platform administration, data and reporting infrastructure, compliance programs, and strategic technology initiatives. The expectation is that this person can and will do real work across all technology domains and will build out the Company’s internal technology function over time as the organization scales through organic growth and acquisition.

The Director will act as the central point of accountability for all aspects of the company’s technology, and technology operations, ensuring investments, vendor performance, security initiatives, compliance programs, and operational priorities are aligned with organizational goals and monitored for performance.

Position reports to Chief Financial & Administrative Officer and has no direct reports initially.

Primary Responsibilities

IT Governance & Strategic Oversight

• Establish and maintain enterprise technology governance processes.

• Develop and maintain technology policies, standards, and operating procedures.

• Align technology initiatives with organizational and operational and financial goals.

• Lead technology planning discussions with executive leadership.

• Maintain multi-year technology roadmaps.

• Provide recommendations on technology investments and strategic priorities, including expected ROIs and plans to measure against expectations.

• Establish accountability across technology functions and service providers.

Vendor Management & Service Governance

Serve as the primary relationship manager for all technology service providers including but not limited to:

• Managing MSP relationships and determining insourcing vs. outsourcing capabilities and timing based on company’s objectives and financial feasibility.

• Managing Company’s Electronic Health Record system (Athena), including serving as primary contact with vendor and liaison between vendor and business on capabilities and operations.

• Coordinating vendor responsibilities and service ownership.

• Leading vendor performance reviews and quarterly business reviews.

• Monitoring service delivery and escalation management.

• Evaluating vendor contracts, renewals, and service agreements.

• Ensuring accountability for technology outcomes across vendors.

• Eliminating service gaps and overlapping responsibilities.

Technology Program & Project Leadership

Provide direction, coordination and oversight of major technology initiatives including:

• New location openings.

• Acquisitions and integrations.

• Telephony and communications projects.

• Security initiatives.

• Infrastructure upgrades.

• Software implementations.

• Compliance-related initiatives.

• Enterprise technology improvements.

• Development of data strategy and build of appropriate data repository to aggregate company data from multiple platforms for centralized access by business intelligence tools (Power BI).

Responsibilities include but are not limited to:

• Defining project objectives.

• Managing budgets and timelines.

• Coordinating vendors and stakeholders.

• Tracking risks and dependencies.

• Reporting project status to executive leadership.

Compliance, Security & Risk Management

Provide governance and oversight for all technology, privacy and security compliance to ensure programs are maintained and properly coordinated across all vendors and stakeholders:

• HIPAA compliance including SOC2 Type 2 readiness/certifications and any HITRUST initiatives.

• Security governance including policy development and enforcement

• Vendor risk management.

• Audit preparation and coordination.

• Incident response governance.