Sr. Director of Information Technology

Firm: Model Oncology
Team: Technology & Innovation
Location: Nashville, TN

Model Oncology ("MO" or "Company") is a next-generation management services organization dedicated to enabling world-class cancer care services within health systems. MO does so through a partnership model that expands and enhances the oncology service lines of its health system partners through dedicated investment, a technology and analytical backbone, and a unique ecosystem of health system operators and physicians. The Company was founded by a group of executives and investors with unique expertise in oncology care and health system partnerships, having previously founded American Oncology Resources, The US Oncology Network, One Oncology, and Select Medical, with additional executive experiences at Via Oncology, Flatiron Health, and Evidation Health.

MO is seeking to expand the Product and Innovation team by adding a Sr. Director of Information Security. This person will work closely with Ed Rodgers (SVP, Product Innovation and Analytics) and be an integral part of the Company’s expansion of its security capabilities, including leading the Company’s security decisions and deployment. This role will have a unique opportunity to evolve the technical stack to the highest standards of security, compliance, and reliability required in healthcare technology.

In 2026 the key security initiatives are preparing for and achieving SOC 2 Type 1 and HITRUST i1 certifications. This person will work closely with our leadership and founding development team to build and maintain robust, scalable infrastructure on Azure, manage our CI/CD pipelines, and ensure seamless integration with healthcare systems.

• Design, implement, and maintain scalable Azure cloud infrastructure security controls including monitoring, logging, and alerting systems while using Infrastructure as Code principles
• Manage and optimize Azure service security for Virtual Machines, App Services, Azure Database for Postgre
  
  SQL, Kubernetes, and Azure Key Vault
• Ensure high availability, disaster recovery, and backup strategies across all systems
• Optimize cloud costs while maintaining performance and security standards
• Contribute perspective on in-house end user compute environments and collaborate with security and privacy officers on ongoing governance and compliance

• Administer Kubernetes Server environment security across development, staging, and production
• Manage Postgre
  
  SQL database cluster security
• Implement and maintain security best practices including patch management, access controls, and compliance monitoring

• Design and implement secure connectivity methods for healthcare system integrations (VPN, HL7, FHIR)
• Ensure HIPAA compliance across all systems and data flows
• Implement security controls for protected health information (PHI) handling
• Oversee SOC 2 and HITRUST Certification processes

• Contribute perspective on appropriate Bash and Python scripts and tools for CI/CD security checks, system automation, monitoring, and operational tasks
• Contribute perspective on custom solutions for healthcare data processing and integration workflows
  
  Collaborate with development team on software deployment lifecycle and ongoing optimization

• 3+ years of experience configuring and administering Microsoft compliance and security controls
• 3+ years of experience collaborating directly with systems engineering, Dev Ops, or related infrastructure roles
• 3+ years of hands‑on experience with Microsoft Azure cloud services and architecture
• Understanding of HIPAA compliance requirements and healthcare security standards and protected data management
• Previous experience in healthcare technology or regulated industries
• Experience with security frameworks and compliance auditing
• Experience with Git Lab administration and CI/CD pipeline development
• Experience with Postgre
  
  SQL database security administration, optimization, and clustering
• Infrastructure as Code Security Knowledge
• Knowledge of containerization technologies (Kubernetes)
• Experience with…