Sr. Manager of IT

Job Summary

The Sr. Manager of Information Technology (IT) is responsible for technology strategy and day-to-day operations across our PE-backed, multi-site behavioral health platform delivering IOP and PHP programs. This is a senior technology role serving as the internal authority on systems, security, and technology investment.

The Sr. Manager of IT directly administers and governs Lightfully's core platform – Salesforce, Kipu (EMR), call center technology, and the Microsoft 365 environment. This role also oversees the data warehouse, Power BI reporting infrastructure, and the internal and contract resources that support analytics, helpdesk, and network operations. The ideal candidate is a hands-on operator with healthcare IT experience who can manage vendors, secure a clinical environment, and drive platform improvements.

Major Responsibilities

• Upholds and maintains the Company, mission, and values (called the Lightfully “Shining Commitments”).

IT Operations & Infrastructure

• Manage company-wide IT operations across all program locations
• Manage the full lifecycle of all network and end-user devices — servers, routers, WAPs, laptops, desktops, tablets, and phones — including procurement, patching, and decommissioning
• Manage Microsoft 365 administration and identity and access management
• Ensure uptime and performance of all critical systems including Salesforce, Kipu, telephony, and collaboration platforms
• Develop and maintain IT documentation, SOPs, asset inventories, and disaster recovery plans
• Directly manage or oversee contract and consulting resources across helpdesk, network support, data engineering, and analytics; ensure accountability, quality of output, and alignment to Lightfully's IT roadmap

Cybersecurity & Compliance

• Own and maintain the organization’s cybersecurity program aligned to the NIST Cybersecurity Framework (CSF); conduct or commission an annual HIPAA Security Risk Assessment and maintain a tracked risk register
• Administer security solutions including MDR/XDR, email security, and DNS filtering
• Design and enforce identity and access controls including RBAC, Privileged Identity Management (PIM), MFA, and Conditional Access policies
• Own data protection controls including endpoint encryption, data in transit (TLS/IPsec), and DLP policies covering ePHI and sensitive patient data
• Maintain and exercise a documented incident response plan; serve as internal IR coordinator and primary communicator to leadership
• Ensure HIPAA and 42 CFR Part 2 compliance across all technology systems and processes