Director of Information Technology

Director of Information Technology (SOC 2 ownership a Must)

• Company Aarista Technology LLC
• Location Burnaby,BC (On-Site)
• Employment type Full-time
• Direct reports 5

Direct ownership and successful completion of a SOC 2 Type II audit is required. Candidates must have hands-on experience managing audit preparation, evidence collection, control testing, auditor coordination, and remediation.

The Director of IT runs day-to-day IT operations at Aarista, a healthcare software company. You will own our security and compliance programs (SOC 2, HIPAA/HITECH, ONC/Cures Act, EPCS, Surescripts and public health reporting), lead the IT team, own service desk quality, keep our processes documented, and manage IT assets, procurement and budget. You will also translate the VP of IT's strategy into an executable roadmap and drive it to completion.

Key responsibilities:

Security and compliance

• Own Aarista's security program and the operational side of every compliance framework we hold or are pursuing:
• o SOC 2 Type I and Type II
• o HIPAA Privacy, Security and Breach Notification Rules, and HITECH
• o ONC Health IT certification and 21st Century Cures Act requirements, including the FHIR Patient Access API and information blocking rules
• Coordinate audits and certifications: evidence collection, control testing, auditor requests and remediation tracking.
• Maintain IT and security policies, including access control, change management, incident response, backup and disaster recovery.
• Run periodic access reviews, risk assessments, vendor risk reviews and security awareness training.
• Partner with Engineering, Clinical and Operations teams to keep PHI handling and regulated product features compliant.

Team leadership and service desk

• Lead, coach and evaluate the IT team; set priorities, assign work and run regular one-on-ones and team reviews.
• Own the ticketing process end to end: intake, triage, prioritization, escalation and closure.
• Define and enforce service levels (response and resolution times) and report performance monthly.
• Run root-cause reviews on recurring or high-impact incidents and drive permanent fixes.
• Plan staffing, on-call coverage and hiring needs as the company grows.

Process and documentation

• Make sure every IT process is documented, current and stored in SharePoint, our system of record.
• Maintain runbooks, SOPs, onboarding and offboarding checklists, and access-provisioning procedures.
• Establish a review cadence so documentation stays accurate after system or process changes.
• Support the company-wide documentation initiative with IT standards and templates.

Assets, procurement and budget

• Maintain an accurate inventory of hardware, software and licenses across the full lifecycle.
• Manage ordering, vendor relationships, renewals and contract negotiations.
• Build, track and report against the annual IT budget; flag variances early.
• Find cost savings through license right-sizing and vendor consolidation.

IT strategy execution

• Translate the VP of IT's strategy into a prioritized roadmap with owners, milestones and budgets.
• Track progress and report status, risks and decisions to the VP of IT.
• Evaluate new tools and platforms and make recommendations.
• Act as the IT point of contact for cross-functional projects.

Required qualifications:

• 8+ years in IT operations, including 3+ years managing an IT team.
• Hands-on experience running a service desk with defined SLAs and a ticketing platform.
• Direct experience running SOC 2 audits and HIPAA/HITECH compliance programs; exposure to ONC certification, EPCS or other healthcare regulatory audits.
• Proven ownership of an IT budget, vendor contracts and asset lifecycle management.
• Strong working knowledge of Microsoft 365, Entra ID (Azure AD), endpoint management and SharePoint.
• A track record of writing clear, maintained process documentation.
• Excellent communication skills with both technical and non-technical stakeholders.
• Bachelor's degree in IT, Computer Science or a related field, or equivalent experience.

Preferred qualifications:

• Experience in healthcare IT or at a SaaS/EHR vendor handling PHI.
• Familiarity with HITRUST, ONC certification or other healthcare regulatory frameworks.
• Experience with compliance automation tools (e.g., Vanta, Drata, Secureframe).
• Certifications such as ITIL, CISSP, CISM, CISA or PMP.
• Experience scaling IT operations at a growing company.

What success looks like in year one

Timeframe/Outcome

• 90 days - Ticket SLAs defined, measured and reported; full asset inventory reconciled
• 6 months - Core IT processes documented in SharePoint; budget tracking in place with monthly reporting
• 12 months - Clean SOC 2 Type II audit with no major exceptions; IT roadmap milestones delivered on schedule

About Aarista

Aarista Technology builds healthcare software used by clinical teams every day. IT here protects patient data, keeps clinicians and engineers productive, and holds the compliance commitments our customers rely on.

Aarista Technology LLC is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status or any other protected characteristic.