Director of IT

Job Details: Job Location: HODGSON DRIVE

• SAVANNAH, GA, Position Type: Full Time, Education Level: 4 Year Degree, Salary Range: Undisclosed, Job Shift: Morning, Job Summary Under minimal supervision, directs and oversees the Information Technology operations of the agency. Provides executive leadership for enterprise technology strategy, cybersecurity, information governance, infrastructure, telecommunications, enterprise applications, project management, data management, cybersecurity risk management, and digital transformation initiatives. Serves as the agency’s senior technology leader and principal advisor to executive leadership on technology planning, cybersecurity risk, information management, regulatory compliance, technology investments, business continuity, and emerging technologies. The Director of Information Technology ensures that technology services, systems, information assets, and digital platforms are secure, reliable, accessible, resilient, compliant, and aligned with the agency’s mission, strategic goals, clinical operations, administrative functions, and business objectives while supporting high-quality service delivery throughout the organization.

Essential Functions

Technology Leadership and Strategic Planning Directs and oversees all information technology resources and operations of the agency. Develops and executes a comprehensive technology strategy and multi-year technology roadmap aligned with organizational priorities. Plans, organizes, monitors, and evaluates information technology operations to ensure effectiveness, efficiency, security, and regulatory compliance.

Leads technology modernization and digital transformation initiatives that enhance organizational effectiveness and service delivery. Advises executive leadership regarding technology planning, budgeting, investments, risks, resource allocation, and emerging trends. Supports organizational strategic planning and operational excellence initiatives.

Evaluates emerging technologies, automation solutions, artificial intelligence applications, and other innovations for organizational benefit and risk. Infrastructure and Enterprise Systems Management Provides leadership for network infrastructure, cloud environments, telecommunications, enterprise applications, hardware management, software platforms, and technical support services.

Directs information technology projects from planning through implementation, evaluation, and continuous improvement. Oversees enterprise application administration, systems integration, application governance, and technology lifecycle management. Establishes measurable service levels, performance standards, operational metrics, and executive reporting processes.

Coordinates technology activities with internal departments, vendors, consultants, government agencies, and community partners. Cybersecurity and Information Security Provides executive oversight of cybersecurity governance, information security programs, risk management activities, incident response, and security awareness initiatives.

Develops, implements, and maintains information security policies, standards, procedures, and controls. Ensures appropriate safeguards are maintained to protect electronic protected health information (ePHI), personally identifiable information (PII), confidential business information, and organizational technology assets.

Oversees cybersecurity risk assessments, vulnerability assessments, remediation activities, audit responses, and corrective action plans. Coordinates organizational responses to cybersecurity incidents, suspected breaches, ransomware events, and information security threats. Promotes cybersecurity awareness and security best practices throughout the organization.

Information Governance and Compliance Provides leadership for information governance, data management, reporting, analytics, and business intelligence initiatives. Supports organizational compliance with HIPAA, HITECH, ADA accessibility requirements, cybersecurity standards, records retention requirements, and other applicable federal and state regulations.

Ensures agency technology operations remain compliant with accreditation standards, contractual obligations, and regulatory requirements. Establishes governance processes supporting accountability, transparency, and organizational objectives. Business Continuity and Disaster Recovery Develops and maintains business continuity, disaster recovery, backup, and technology resilience programs.

Ensures critical systems remain operational and recoverable during disruptions or emergencies. Coordinates testing, validation, and continuous improvement of disaster recovery and continuity plans. Provides leadership during major technology outages and emergency response situations. Financial and Vendor Management Oversees technology budgets, procurement activities, vendor contracts, software licensing, and strategic technology partnerships.

Monitors technology expenditures and resource utilization. Evaluates technology investments and return on investment opportunities. Negotiates and manages contracts with vendors, service providers, consultants, and technology partners. Required Knowledge & Skills Advanced knowledge of information technology operations, infrastructure, networking, cloud computing, systems administration, cybersecurity, and enterprise applications.

Knowledge of healthcare technology environments and information systems supporting clinical and administrative operations. Knowledge of HIPAA, HITECH, cybersecurity regulations, privacy requirements, records retention requirements, and applicable federal and state laws. Knowledge of information governance, data management, analytics, business intelligence, and reporting systems.

Knowledge of cybersecurity frameworks, risk management methodologies, vulnerability management, identity and access management, and incident response practices. Knowledge of disaster recovery planning, business continuity management, and technology resilience strategies. Knowledge of technology budgeting, procurement, vendor management, and contract administration.

Knowledge of project management methodologies and enterprise technology implementation practices. Ability to analyze complex business and technology challenges and implement effective solutions. Ability to communicate technical and cybersecurity concepts to executive leadership, governing bodies, regulators, and non-technical stakeholders.

Ability to develop strategic plans and translate organizational priorities into actionable initiatives. Ability to lead organizational change and technology adoption efforts. Ability to manage multiple priorities, large-scale initiatives, and competing deadlines simultaneously. Ability to develop collaborative relationships with stakeholders, vendors, consultants, and community partners.

Ability to develop policies, procedures, training materials, and operational documentation. Ability to adapt to rapidly evolving technologies and changing regulatory requirements. Ability to operate an agency vehicle in accordance with agency policy and applicable laws. Primary Responsibilities, but not limited to: Technology strategy and governance.

Cybersecurity leadership and risk management. Infrastructure, telecommunications, and cloud operations oversight. Enterprise systems administration and lifecycle management. Technology project planning and implementation. Information governance and business intelligence initiatives. Technology budgeting, procurement, and vendor management.

Business continuity and disaster recovery planning. Regulatory compliance and audit readiness. Leadership of technical support and end-user services. Digital transformation and innovation initiatives. Executive technology planning and reporting.

Qualifications

Competencies Strategic Leadership Problem Solving and Analysis Change Management Technology Governance Cybersecurity Risk Management Communication Proficiency Ethical Conduct Financial Management Time Management Customer and Client Focus Personal Effectiveness and Credibility Professionalism and Organizational Effectiveness Innovation and Continuous Improvement Executive Decision-Making Information Governance and Stewardship Inspires and Motivates Others Organizational Development Relationship Management Required Education & Experience Minimum Qualifications Bachelor’s degree from an accredited college or university in Information Technology, Computer Science, Information Systems, Cybersecurity, Business Administration, Healthcare Administration, Health Informatics, Engineering, or a closely related field and eight (8) years of progressively responsible information technology experience, including leadership responsibility for technology operations, strategic planning, systems administration, cybersecurity, and complex technology projects; OR Associate degree in a related field and ten (10) years of progressively responsible information technology experience with demonstrated leadership responsibility for technology operations and enterprise technology initiatives.

Preferred Qualifications

Master’s degree in Information Technology, Information Systems, Cybersecurity, Business Administration, Healthcare Administration, Health Informatics, or a related discipline. Experience in healthcare, behavioral health, human services, government, or another highly regulated environment. Experience managing cybersecurity, information security, and risk management programs.

Experience supporting compliance audits, risk assessments, and remediation initiatives. Experience leading large-scale technology implementations, modernization efforts, or organizational transformation initiatives. Demonstrated experience managing technology contracts, strategic partnerships, operational budgets, and capital expenditures.

Demonstrated experience in independent problem-solving and effective written, verbal, and interpersonal communication. Preferred Certifications One or more of the following certifications is preferred: Certified Information Systems Security Professional (CISSP) Certified Information Security Manager (CISM) Certified Information Systems Auditor (CISA) Certified in Risk and Information Systems Control (CRISC) Certified Information Privacy Professional (CIPP) Project Management Professional (PMP) ITIL Certification Certified Healthcare CIO (CHCIO) Certified Professional in Healthcare Information and Management Systems (CPHIMS) Relevant cloud, enterprise architecture, cybersecurity, or governance certifications Upon appointment to the position, the employee assumes responsibility for meeting and maintaining all minimum qualification requirements, including applicable certifications, licenses, continuing education, competency validations, and mandatory annual or recurrent training.

Failure to maintain such requirements may affect eligibility to perform assigned duties. Supervisory Responsibilities Responsible for the overall operation of technology functions and assigned staff. Establishes and communicates departmental goals, objectives, and performance expectations. Monitors operational performance and evaluates employee effectiveness.

Provides coaching, mentorship, and ongoing performance feedback. Supports employee development, succession planning, and professional growth initiatives. Builds a culture of accountability, customer service, innovation, cybersecurity awareness, and continuous improvement. Leads organizational change initiatives and stakeholder engagement efforts.

Develops innovative approaches to improve technology programs and business processes. Conducts employee evaluations and addresses performance concerns when necessary. Promotes employee engagement, collaboration, recognition, and retention. Supports workforce continuity planning for critical technology functions. Work Environment This position operates in a variety of office, technology, healthcare, and community environments.

The role routinely utilizes computers, servers, networking equipment, telecommunications systems, telephones, photocopiers, filing systems, and related technology resources. Moderate travel between Gateway locations and community sites may be required. The position may be required to respond to technology emergencies, cybersecurity incidents, system outages, and critical operational events outside normal business hours.

Physical Demands The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Frequently walks, sits, stands, and kneels. Occasionally climbs, balances, bends, and stoops. Frequently lifts and/or moves up to 15 pounds.

Must have the ability to sit for extended periods while working at a computer. Frequently utilizes fine hand-eye coordination, hearing, and visual acuity. Must be able to travel between Gateway sites and community locations. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Gateway CSB promotes a drug-free and alcohol-free work environment through mandatory pre-employment drug testing. Terms & Conditions Reports to work when scheduled and begins and ends work as expected. Reports anticipated tardiness or absence to the supervisor. Observes policies regarding meal and break periods. Uses work time appropriately and efficiently.

Requests and utilizes leave appropriately. Maintains a professional appearance in accordance with site dress code requirements. Observes health, safety, and sanitation policies. Performs work according to all applicable rules, regulations, policies, and guidelines. Ensures licensure and certification are current and active without suspension or revocation throughout employment.

Ensures compliance with required training, including new employee orientation. Does not engage in activities other than official business during work hours. Does not report to work under the influence of alcohol or drugs. Adheres to Gateway’s Standards of Conduct 3.13 and Employee Ethics 3.23. May be required to remain at or return to work during agency incidents or emergencies and may work non-traditional schedules as necessary to support agency operations.

Other Duties Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee in this job. Duties, responsibilities and activities may change at any time with or without notice.