Tonal
Director, IT & Security
Austin, TX · Director
Sponsorship not specifiedDetected 13 days ago
Computer VisionCybersecurityPenetration TestingSIEMIncident ResponseComplianceAccessibilityNegotiationProcess ImprovementHIPAALeadershipPublic Speaking
About the role
- This role carries the highest privileges across our most sensitive systems and direct accountability for IT and security outcomes company-wide.
- You'll report to the VP of Business Technology and work closely with senior leadership.
- The ideal candidate has a start-up mentality - comfortable moving fast in a lean, resource-constrained environment, while never losing sight of the security and compliance discipline a healthcare-adjacent company requires.
Responsibilities
- Own and execute Tonal's security program: penetration testing remediation, security policy, tabletop exercises, vendor security reviews, and incident response.
- Govern Tonal's AI tool ecosystem, including licensing, spend, API key governance, corporate AI policy, and DLP and prompt injection protections. Drive AI training and best practices across the organization.
- Drive automation and identity governance maturity, including Okta Identity Governance, expanding SCIM-based provisioning, building & enforcing RBAC frameworks, and driving workflow automation and system integration.
- Lead and grow the IT & Security team, managing engineers and administrators, overseeing the virtual CISO engagement, owning the budget and aligning org structure to Tonal's needs.
- Own IT documentation and process improvement, maintaining runbooks and closing gaps in onboarding, offboarding, and incident response, and driving overall automation.
- Manage global physical infrastructure - networking, Wi-Fi, AV, and physical access - across a distributed, multi-office footprint.
- Strong people leadership skills, setting clear expectations and developing team members
Requirements
- Broad expertise across identity and access management, endpoint security, SaaS administration, and network infrastructure
- Proven ability to prioritize with a lean team and limited budget, with outcomes to show for it.
- Experience managing a large SaaS portfolio, including contract renewals, vendor negotiation, and license governance
- Experience with SOC 2 Type II, NIST CSF, or HITRUST in a hands-on implementation capacity
- Should you have any accommodation requests, please reach out to us via our confidential email, accessibility@tonal.com.
Skills
- Administer Tonal's SaaS portfolio, owning contract renewals, license optimization, and vendor negotiations across critical platforms.
- Serve as a trusted operator on Tonal's most sensitive matters, from executive access provisioning to security incidents and legal holds.
- Hands-on HIPAA compliance implementation experience, beyond writing policies
Benefits
- Background in healthcare technology, digital health, or clinical-grade software environments
- Tonal is the world's most intelligent strength training system, combining hardware, software, AI, computer vision, and world-class content to help people build strength and live healthier.
Company info
- We're looking for a Director of IT & Security to own this function end-to-end.
This listing is sourced directly from Tonal's careers page and normalized into a canonical job model.