Lead enterprise cybersecurity and IT operations for a HIPAA-regulated healthcare company: build and mature security programs, manage IAM/endpoint/cloud security, drive vulnerability management and incident response, ensure compliance (HIPAA/HITECH), oversee IT operations and vendor risk, and mentor a technical team while partnering with cross-functional leadership.
Luna is seeking a Director of Information Security & IT to lead the strategy, execution, and continuous evolution of the company's enterprise technology and information security programs. Reporting to the Chief Strategy & Product Officer, this leader will be responsible for enterprise cybersecurity, IT operations, healthcare technology systems, identity and access management, infrastructure, and technology compliance, ensuring secure, scalable, and resilient technology solutions that support Luna's business operations and the delivery of high-quality patient care.
This role is a hands-on leadership position requiring a balance of strategic vision and technical execution. The Director will lead the continued maturation of Luna's cybersecurity and IT capabilities while remaining actively engaged in technical decision-making, operational leadership, and cross-functional partnership. Working closely with Engineering, Product, Compliance, Legal, and executive leadership, this individual will strengthen Luna's security posture, safeguard sensitive healthcare information, and build scalable technology programs that enable continued growth within a HIPAA-regulated environment.
How you will have an impact
- Lead Luna's enterprise cybersecurity strategy, roadmap, and security operations, continuously strengthening our security posture across cloud infrastructure, endpoints, business systems, and enterprise applications.
- Build, mature, and maintain a comprehensive information security program, including security policies, standards, governance, risk management, and security awareness initiatives.
- Serve as the technical leader for enterprise IT operations, ensuring reliable, secure, and scalable technology services that support business growth and an exceptional employee experience.
- Own Identity and Access Management (IAM), including SSO, MFA, provisioning/deprovisioning, privileged access management, and periodic access reviews.
- Oversee endpoint management, Mobile Device Management (MDM), device lifecycle, asset management, and enterprise SaaS administration.
- Lead vulnerability management, threat detection, penetration testing, incident response, disaster recovery, backup, and business continuity planning.
- Partner with Engineering, Product, Compliance, Legal, Finance, Operations, and People teams to integrate security best practices into enterprise technology and business operations.
- Ensure compliance with HIPAA, HITECH, and other applicable regulatory and security frameworks through technical safeguards, documentation, audits, and remediation activities.
- Manage third-party security assessments, vendor risk reviews, customer security questionnaires, and ongoing technology vendor relationships.
- Evaluate emerging technologies and recommend secure, scalable solutions that improve operational effectiveness while balancing risk, cost, and business priorities.
- Mentor and develop a high-performing IT team while remaining actively involved in technical execution, architecture decisions, and day-to-day operational support.
- Communicate technology strategy, cybersecurity risks, investment recommendations, and program progress to executive leadership.
What you need
- 8+ years of progressive experience leading information security, enterprise IT, or blended technology functions, including hands-on ownership of enterprise cybersecurity programs.
- Demonstrated success building, implementing, and maturing cybersecurity programs while balancing security, compliance, and business objectives in a healthcare or other highly regulated environment.
- Direct experience supporting healthcare technology environments, including healthcare systems, enterprise applications, and technology platforms within HIPAA-regulated organizations.
- Strong knowledge of healthcare security and compliance requirements, including HIPAA, HITECH, PHI protection, security governance, risk assessments, audits, and remediation activities.
- Hands-on experience with cloud security (AWS, Azure, or GCP), identity and access management (IAM), Single Sign-On (SSO), Multi-Factor Authentication (MFA), endpoint management, Mobile Device Management (MDM), and enterprise infrastructure.
- Experience leading enterprise IT operations, technology roadmaps, incident response, disaster recovery, business continuity, vulnerability management, and security operations.
- Proven ability to lead and mentor technical teams while remaining hands-on with technical execution in a fast-paced, high-growth environment.
- Previous experience as a Director, or as a Senior Manager operating with Director-level scope and responsibility.
- Experience partnering with executive leadership to develop technology strategy, evaluate risk, and communicate complex technical concepts to both technical and non-technical audiences.
- Experience managing third-party vendors, security assessments, customer security questionnaires, and enterprise technology implementations.
Luna Physical Therapy Irvine, California, USA Office
1 Civic Center Plaza, Irvine, United States, 92606
Luna Physical Therapy Los Angeles, California, USA Office
125 Paseo De La Plaza, Los Angeles, United States, 90012
Luna Physical Therapy Rancho Cucamonga, California, USA Office
10500 Civic Center Dr, Rancho Cucamonga, United States, 91730
Similar Jobs
Big Data • Fintech • Mobile • Payments • Financial Services
The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.
Top Skills:
Cloud ComputingCompliance (FdicCybersecurityFfiec)Incident ResponseInformation Security FrameworksRisk ManagementSecurity Operations
Beauty • Robotics • Design • Appliances • Manufacturing
Leads SharkNinja’s Americas Amazon and pure-player business across the U.S. and Canada, owning P&L, profitable growth, marketplace strategy, negotiations, forecasting, inventory, media, content, analytics, and cross-functional execution. Builds a high-performing e-commerce organization, leads joint business planning with Amazon, advances AI-enabled commercial operations, and drives market share, margin, and contribution growth.
Top Skills:
1P Vendor3P MarketplaceA+ ContentAmazon AdsAmazon MarketplaceDtcExcelPower BI
Consumer Web • Healthtech • Professional Services • Social Impact • Software
Owns Headway’s patient safety triage operations, including SOPs, quality assurance, escalation workflows, clinical product launch readiness, safety reporting, dashboards, vendor management, and incident response. The role coordinates clinical, product, and engineering teams, drives quality improvement initiatives, and builds scalable systems and reporting for clinical leadership and the Board.
Top Skills:
LookerExcelSQL
What you need to know about the Los Angeles Tech Scene
Los Angeles is a global leader in entertainment, so it’s no surprise that many of the biggest players in streaming, digital media and game development call the city home. But the city boasts plenty of non-entertainment innovation as well, with tech companies spanning verticals like AI, fintech, e-commerce and biotech. With major universities like Caltech, UCLA, USC and the nearby UC Irvine, the city has a steady supply of top-flight tech and engineering talent — not counting the graduates flocking to Los Angeles from across the world to enjoy its beaches, culture and year-round temperate climate.
Key Facts About Los Angeles Tech
- Number of Tech Workers: 375,800; 5.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Snap, Netflix, SpaceX, Disney, Google
- Key Industries: Artificial intelligence, adtech, media, software, game development
- Funding Landscape: $11.6 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Strong Ventures, Fifth Wall, Upfront Ventures, Mucker Capital, Kittyhawk Ventures
- Research Centers and Universities: California Institute of Technology, UCLA, University of Southern California, UC Irvine, Pepperdine, California Institute for Immunology and Immunotherapy, Center for Quantum Science and Engineering
