Director of IT and Security&nbsp;
at Zócalo Health
Remote (Full Time)&nbsp;
Compensation: $165,000-$180,000 (per year)
&nbsp;
About Us&nbsp;
Zócalo Health is a tech-enabled, community-oriented primary care organization serving people who have historically been underserved by the one-size-fits-all&nbsp; healthcare system. We partner with health plans, providers, and community organizations to deliver culturally competent primary care, behavioral health, and social care.
Our model is built for populations with high medical and social complexity, where fragmented care drives poor outcomes and unnecessary cost. We combine local, community-based teams with virtual care and modern technology to deliver coordinated, whole-person care where members live and receive support.
Founded in 2021, Zócalo Health is backed by leading healthcare and mission-aligned investors and is scaling rapidly across states and populations. We are building a durable care platform designed to perform in constrained healthcare environments and to lead the shift toward accountable, value-based care.
&nbsp;
Role Description&nbsp;
The Director of IT &amp; Security will join Zócalo Health at a critical inflection point as the organization scales systems, headcount, and regulatory obligations. This role exists to establish centralized ownership and strategic direction for all IT operations, infrastructure, and end-user support, alongside security and access governance. A critical early objective is leading the organization toward HITRUST certification by December 2026.
This leader will serve as the single accountable owner for security posture, system access controls, and IT governance, reducing organizational risk and enabling safe, efficient growth.
This position reports to the Chief People &amp; Compliance Officer, with a future-state possibility of transitioning under a future technical leader as the organization matures.
The Director of IT and Security will contribute in the following ways:
<ul>
<li>Manage and maintain the company's technology infrastructure, including cloud services, networking, and internal application stack.</li>
<li>Develop and execute the long-term IT roadmap to support Zócalo Health’s rapid growth and scalability.</li>
<li>Oversee the IT operational budget, ensuring cost-effective technology investments and asset management.</li>
<li>Lead the IT Helpdesk function, establishing service level agreements (SLAs) for excellent and timely end-user support and issue resolution.</li>
<li>Manage the procurement, deployment, inventory, and lifecycle management of all company hardware, software, and SaaS assets.</li>
<li>Ensure effective training and support for employees on all internal systems and productivity tools.</li>
<li>Establish and regularly test a robust business continuity and disaster recovery plan for critical IT systems.</li>
<li>Own and lead the HITRUST certification program, including control implementation, documentation, and audit readiness</li>
<li>Establish and enforce security policies, standards, and procedures</li>
<li>Own system access provisioning and de-provisioning across all platforms</li>
<li>Oversee MDM, endpoint security, and identity management</li>
<li>Lead vendor security reviews and ongoing risk assessments</li>
<li>Coordinate incident response and remediation efforts</li>
<li>Partner with Engineering, Product, Compliance, and Operations on security and IT initiatives</li>
<li>Manage outsourced IT and security vendors as appropriate</li>
<li>Build scalable IT and security governance that supports growth beyond 250 employees</li>
</ul>
&nbsp;
Qualifications
<ul>
<li>8+ years of experience in IT, security, or information security leadership</li>
<li>Strong background in managing and scaling cloud-based infrastructure.</li>
<li>Proven experience leading an IT operations or end-user support team/Helpdesk function.</li>
<li>Demonstrated ability to manage IT capital and operating budgets and vendor relationships for technical services.</li>
<li>Direct experience leading security programs in regulated environments</li>
<li>Demonstrated experience with HITRUST, SOC 2, HIPAA, or similar frameworks</li>
<li>Strong understanding of access control, identity management, and endpoint security</li>
<li>Experience working in high-growth or startup environments</li>
<li>Ability to balance strategic leadership with hands-on execution</li>
</ul>
Preferred Qualifications
<ul>
<li>Prior experience in healthcare or healthtech organizations</li>
<li>Experience building security programs from early or mid-stage maturity</li>
</ul>
What you can expect from Zócalo Health
<ul>
<li>Equity compensation package</li>
<li>Comprehensive benefits including medical, dental, and vision&nbsp;</li>
<li>401k</li>
<li>Flexible PTO policy - take the time you need to recharge</li>
<li>$1,000 home office stipend</li>
<li>We provide the equipment needed for this role.</li>
<li>Opportunity for rapid career progression with plenty of room for personal growth.</li>
</ul>
 
You must be authorized to work in the United States. Remote Work can be done from anywhere in the U.S.
&nbsp;
At Zócalo Health Inc., we see diversity and inclusion as a source of strength in transforming healthcare. We believe building trust and innovation are best achieved through diverse perspectives. To us, acceptance and respect are rooted in an understanding that people do not experience things in the same way, including our healthcare system. Individuals seeking employment at Zócalo Health are considered without regard to race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. 
&nbsp;
Those seeking employment at Zócalo Health are considered without regard to race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status or disability status.
&nbsp;