IT Manager​/Senior IT Manager

Overview

Summary Oversees measures to protect ARKRAY’s physical and digital security and provides safeguards for ARKRAY employees, facilities and assets. This role fulfills the Security Officer requirement as determined by HIPAA.

• Ensures that all applicable Payment Card Industry Data Security Standard (PCI-DSS), Health Insurance Portability and Accountability Act of 1996 (HIPAA), and Health Information Technology for Economic and Clinical Health Act (HITECH) provisions (in addition to any other relevant information security standards) are followed in order to safeguard Cardholder Data and Protected Health Information (PHI) that is uploaded, processed, and contained in ARKRAY Information Systems ("the IT Systems").
• Responsible for the management of the processes and personnel involved in the software development process, while adhering to FDA requirements for medical device software development.
• Responsible for establishing and maintaining policies and procedures relating to information security, loss prevention, fraud prevention and privacy, as well as business continuity and disaster recovery planning.
• Develops and directs the company’s IT strategy, works closely with senior management to coordinate data systems policies and procedures.
• Maintenance and operation of IT assets managed, including network systems, servers, cloud services, and PC/mobile devices.
• Budgeting and payment management for IT assets under the IT team's control.
• Response to system failures, data breaches, or other emergency incidents.
• Develop, train, and manage the IT Team.
• The Security Officer designation is a HIPAA requirement guiding the responsibilities of the individual in charge of development, implementation, training, and maintenance of policies and procedures related to the Software System.
• Supervises the development, maintenance, and communication of required information security policies and procedures.
• Conducts security risk assessments and supervises mandated remediation of potential breaches of information security.
• Point of contact for any immediate concerns for the security of information in regard to the software system.
• Ensures fulfillment of legal and contractual information security and privacy mandates, including providing executive management with compliance reports and audit findings.
• Manages security audits, vulnerability and threat assessments, and directing responses to network or system intrusions.
• Handles results of periodic security evaluations.
• Directs IT purchasing and investment.
• Implements and monitors new IT projects.
• Manages the software development, implementation, update and replacement processes from start to finish while delegating non-manager level responsibilities according to employee abilities while addressing all security concerns and ensuring compliance with all legal and regulatory requirements.
• Act as the Lead IT person in the US for all Cross-border IT projects of the ARKRAY Group.
• Management, operation, and maintenance of USIT assets, including handling payments, allocating costs to internal departments, and managing assets such as PCs, servers, and internal systems.
• User support at the helpdesk level when needed.

Note: This description reflects responsibilities as described in the original text without introducing new facts. The content has been reformatted for clarity and conformance with formatting standards.