Information Technology Director

WHITE MOUNTAIN APACHE BEHAVIORAL HEALTH SERVICES, INC.

JOB DESCRIPTION

POSITION: INFORMATION TECHNOLOGY DIRECTOR

CLASSIFICATION CODE: EXEMPT FULL TIME

DEPARTMENT: INFORMATION TECHNOLOGY

REPORTS TO: CEO

STATEMENT OF JOB: The Information Technology (IT) Director provides executive-level leadership, strategic direction, and hands-on management for all aspects of Apache Behavioral Health Services’ (ABHS) technology operations. This includes IT infrastructure, cybersecurity, data protection, vendor relationships, electronic health record (EHR) systems, and digital innovation initiatives. The IT Director ensures compliance with HIPAA Security Rules, federal (IHS), state (AHCCCS), and Tribal (638 contract) requirements, while supporting clinical, administrative, and operational excellence across multiple ABHS facilities on the Fort Apache Reservation.  As both a strategic leader and a hands-on practitioner, the IT Director develops IT policies, oversees staff and vendors, manages complex projects, and directly engages in technical problem-solving to guarantee secure, efficient, and reliable IT systems that support ABHS’s mission of providing behavioral health care to the White Mountain Apache Tribe.

DUTIES AND RESPONSIBILITIES:

Strategic Leadership & Governance

1. Serve as ABHS’s senior technology executive, aligning IT strategy with agency mission, compliance requirements, and growth initiatives.
2. Develop and execute multi-year IT roadmaps covering infrastructure upgrades, cybersecurity maturity, cloud adoption, and digital innovation.
3. Lead the IT Steering Committee, advising the CEO and executive leadership team on technology investments, risk posture, and emerging solutions.
4. Develop, manage, and monitor the IT department budget in collaboration with Finance and the CEO, balancing cost control with innovation.
5. Represent ABHS in Tribal, state, and national IT consortiums, ensuring advocacy and access to shared resources.
6. Establish and enforce IT governance, including change management, technology standards, and agency-wide compliance policies.
7. Provide regular IT performance, risk, and compliance reporting to the CEO, Board of Directors, and regulatory agencies.

Cybersecurity & Compliance Oversight

1. Serve as Chief Information Security Officer (CISO) for ABHS, ensuring compliance with HIPAA, IHS, AHCCCS, and Tribal IT security requirements.
2. Lead enterprise-wide security frameworks, including NIST CSF and CIS controls, adapting to the needs of healthcare and behavioral health environments.
3. Direct incident response, breach investigations, and forensic activities in coordination with Tribal, state, and federal partners.
4. Oversee risk assessments, penetration testing, and vulnerability management programs; ensure timely remediation.
5. Ensure encryption, MFA, endpoint protection, mobile device management, and secure cloud practices are enforced across ABHS.
6. Maintain compliance with cybersecurity insurance requirements and support audits by insurers, regulators, and external entities.
7. Develop and maintain ABHS’s Information Security Program Manual and Business Continuity/Disaster Recovery (BC/DR) plans.
8. Supervise data governance, data loss prevention (DLP), and secure data exchange practices across all platforms.
9. Ensure Business Associate Agreements (BAAs) and vendor security reviews are current and enforceable.

IT Operations & Infrastructure

1. Oversee day-to-day IT operations for all ABHS facilities, including clinics, shelters, residential facilities, and administrative offices.
2. Provide hands-on technical leadership for infrastructure management, including servers, storage, networks, VoIP, firewalls, and wireless systems.
3. Ensure continuous uptime and secure operation of ABHS’s EHR (myEvolv), HRIS, and financial systems.
4. Lead agency-wide cloud strategy, optimizing Microsoft 365, Azure AD, Teams, SharePoint, OneDrive, and hybrid integrations.
5. Direct system monitoring, patch management, and lifecycle refresh planning for hardware, software, and network devices.