Director of Security

Director of Security

Are you ready to join a passionate community of people who are changing how health care is delivered? A place where you will find a career you love while truly making a difference building healthier communities. If this sounds like you, we would love to have you apply as Director of Security, with Medical Home Network!

Since 2009, Medical Home Network (MHN) has partnered with Federally Qualified Health Centers (FQHCs) nationwide to transform care in the safety net, reduce health disparities, and build healthier communities. A mission-driven public benefit corporation, MHN helps FQHCs succeed in value-based care through technology, care model innovation, and strong partnerships. Our proven approach delivers leading health outcomes, lower costs, and elevated quality performance. We’re expanding our reach and impact to help more FQHCs enhance care for their patients. Modern Healthcare has named MHN one of the Best Places to Work in Healthcare for four years running (2021–2024). MHN was recently recognized as a Great Place to Work in 2025.

THE OPPORTUNITY:

MHN is seeking a Director of Security to lead our enterprise security strategy in a highly regulated healthcare environment. This role requires a technically strong security leader with a background in infrastructure, networking, or cloud engineering, who has evolved into security leadership. The Director of Security will own MHN’s security posture across cloud infrastructure, applications, data, and operations, while ensuring compliance with healthcare regulatory requirements.

THE PERKS:

• Fun, challenging, and collaborative work environment with passionate colleagues that care deeply about healthcare delivery.
• Recognized as One of the Best Places to Work in Healthcare by Modern Healthcare.
• Competitive benefits programs including Medical, Vision, Dental, HSA, FSA, and 401k.
• Fitness reimbursement, commuter benefits, and tuition assistance.
• Great work life benefits- Paid time off, sick time, and 12 paid holidays.
• Remote/Hybrid Schedule: This role follows a hybrid work model. Candidates within 50 miles of Chicago are expected to work onsite two days per week (Monday and Tuesday) and remotely three days per week. Candidates outside of the 50-mile radius are eligible for fully remote work.

WHAT YOU CAN LOOK FORWARD TO:

• Own and evolve MHN’s enterprise security strategy aligned with business goals and healthcare regulatory requirements.
• Serve as the primary security leader and trusted advisor to Technology, Product, and Executive leadership.
• Build strong partnerships with Engineering, Infrastructure, DevOps, and Compliance teams.

• Lead security architecture and controls within Microsoft Azure, including identity and access management, network security, encryption, logging, and monitoring.
• Partner with infrastructure and networking teams to secure cloud, hybrid, and third-party environments.
• Ensure secure design and implementation of systems supporting healthcare data and applications.

• Lead and maintain compliance with healthcare security and privacy regulations, including HIPAA, HITRUST, SOC 2, and related frameworks.
• Act as the owner and driver of HITRUST certification, including preparation, audits, remediation, and ongoing compliance.
• Collaborate closely with Compliance, Legal, and Risk teams to interpret and operationalize regulatory requirements.

• Develop and oversee security risk assessments, threat modeling, and vulnerability management programs.
• Own incident response planning, tabletop exercises, and real-world incident management.
• Manage third-party security risk, vendor assessments, and security reviews.

• Establish and maintain security policies, standards, and governance frameworks.
• Ensure strong security awareness and best practices across the organization.
• Support MHN’s commitment to being a high-trust partner to providers, payers, and customers.

WHAT YOU’LL NEED TO SUCCEED:

• Bachelor’s degree, or equivalent experience.   
• 8+ years of experience in technology roles, with progressive responsibility in security leadership. 
• Strong technical background in infrastructure, networking, cloud engineering, or DevOps, prior to or alongside security roles. 
• Hands-on experience leading HITRUST certification efforts (required). 
• Deep understanding of healthcare security and regulatory landscapes (HIPAA, HITRUST, SOC 2, etc.). 
• Proven experience securing Microsoft Azure environments. 
• Ability to translate complex security concepts into clear business and risk discussions. 
• Experience working in healthcare, health tech, payer, provider, or value-based care environments. 
• Experience in healthcare technology organizations. 
• Familiarity with identity platforms, zero trust models, and modern cloud security tooling. 
• Prior experience scaling security programs in growing organizations. 
• Relevant certifications (CISSP, CISM, CCSP, Azure Security certs) are a plus.