Director , Information Security and IT

Luna is seeking a Director of Information Security & IT to lead the strategy, execution, and continuous evolution of the company's enterprise technology and information security programs. Reporting to the Chief Strategy & Product Officer, this leader will be responsible for enterprise cybersecurity, IT operations, healthcare technology systems, identity and access management, infrastructure, and technology compliance, ensuring secure, scalable, and resilient technology solutions that support Luna's business operations and the delivery of high-quality patient care. This role is a hands-on leadership position requiring a balance of strategic vision and technical execution. The Director will lead the continued maturation of Luna's cybersecurity and IT capabilities while remaining actively engaged in technical decision-making, operational leadership, and cross-functional partnership. Working closely with Engineering, Product, Compliance, Legal, and executive leadership, this individual will strengthen Luna's security posture, safeguard sensitive healthcare information, and build scalable technology programs that enable continued growth within a HIPAA-regulated environment. How you will have an impact Lead Luna's enterprise cybersecurity strategy, roadmap, and security operations, continuously strengthening our security posture across cloud infrastructure, endpoints, business systems, and enterprise applications. Build, mature, and maintain a comprehensive information security program, including security policies, standards, governance, risk management, and security awareness initiatives. Serve as the technical leader for enterprise IT operations, ensuring reliable, secure, and scalable technology services that support business growth and an exceptional employee experience. Own Identity and Access Management (IAM), including SSO, MFA, provisioning/deprovisioning, privileged access management, and periodic access reviews. Oversee endpoint management, Mobile Device Management (MDM), device lifecycle, asset management, and enterprise SaaS administration. Lead vulnerability management, threat detection, penetration testing, incident response, disaster recovery, backup, and business continuity planning. Partner with Engineering, Product, Compliance, Legal, Finance, Operations, and People teams to integrate security best practices into enterprise technology and business operations. Ensure compliance with HIPAA, HITECH, and other applicable regulatory and security frameworks through technical safeguards, documentation, audits, and remediation activities. Manage third-party security assessments, vendor risk reviews, customer security questionnaires, and ongoing technology vendor relationships. Evaluate emerging technologies and recommend secure, scalable solutions that improve operational effectiveness while balancing risk, cost, and business priorities. Mentor and develop a high-performing IT team while remaining actively involved in technical execut