Skip to main content
CareerApp

Director, IT & Security

Tonal

Austin, TX · Remote · Director

$178,000 – $220,000

Listed on Tonal’s own careers site. You apply with them directly — we never stand between you and the employer.

What this role is

Tonal seeks a Director to lead IT operations and security functions as the company expands into healthcare. You'll manage device infrastructure, HIPAA compliance implementation, security programs, and a growing team while navigating the startup pace of a hardware and software company entering regulated markets.

Our summary, not Tonal’s wording. The full posting is on their site.

What they ask for

Required

  • 10+ years in IT and security leadership with full functional ownership
  • Hands-on HIPAA compliance implementation experience beyond policy writing
  • Track record building a security program from the ground up including policy, penetration testing, and incident response
  • Broad expertise across identity and access management, endpoint security, SaaS administration, and network infrastructure
  • Ability to configure technical systems and present security risk to executives
  • Startup mentality thriving in fast-moving resource-constrained environments without compromising security
  • Experience managing large SaaS portfolios including renewals, vendor negotiation, and license governance
  • Strong people leadership and team development skills
  • High standards of trust, integrity, and discretion

Nice to have

  • HIPAA compliance rollout and execution owning technical controls end-to-end
  • Experience with SOC 2 Type II, NIST CSF, or HITRUST in hands-on implementation
  • Background in healthcare technology, digital health, or clinical-grade software

Turn on analytics and we load Google Analytics: Google gets the pages you open and what you do here — searches, jobs you view, jobs you apply to — and sets its own cookies. Leave it off and the only cookies we set are your login, your theme, and this answer. Accept All also records a yes to advertising, which nothing uses yet. Privacy Policy.