Position Overview:
The Chief Information Officer (CIO) serves as Boston MedFlight's senior executive responsible for the leadership, direction and oversight of all aspects of the organization's IT functions. The CIO develops and executes a technology strategy that advances Boston MedFlight's mission, supports safe and reliable critical care transport operations, protects patient and organizational information, and enables effective decision-making across clinical, aviation, communications, ground, and administrative functions. The CIO is a member of the senior leadership team and provides clear, risk-based recommendations to executive leadership and the Board of Trustees.
Essential Responsibilities:
• IT Strategy and Governance: Develop and maintain a multi-year information technology and digital strategy aligned with organizational priorities and measurable outcomes.
• Executive and Board Partnership: Advise executive leadership and the Board of Trustees on technology strategy, cybersecurity risk, business continuity, digital opportunities, regulatory exposure, capital requirements, and major technology initiatives. Translate complex technical issues into clear operational and financial implications.
• Cybersecurity and Information Risk: Lead an IT cybersecurity and information-risk program that protects patient, employee, operational, and business information. Maintain policies, controls, security awareness, incident response, vulnerability management, identity and access management, and third-party risk oversight.
• Healthcare Privacy and Regulatory Alignment: Partner with Compliance, Legal, Clinical, Human Resources, and operational leaders to support adherence to applicable privacy, security, records-management, and healthcare requirements, including HIPAA. Acts as Boston MedFlight's Security Officer, ensuring technology practices support auditing, retention, access control, and appropriate handling of sensitive information.
• Operational Systems: Provide executive oversight for the selection, integration, reliability, and lifecycle management of systems and applications supporting patient care, communications, dispatch, aviation, ground transport, fleet, safety, quality, education, finance, human resources, and administration.
• Infrastructure and Enterprise Services: Oversee secure, scalable, and highly available infrastructure, including networks, servers, endpoints, cloud services, data storage, telecommunications, mobile devices, collaboration platforms, telephone systems, and security camera systems across Boston MedFlight locations.
• Business Continuity and Disaster Recovery: Establish and regularly test technology continuity, disaster recovery, backup, restoration, emergency communication, and cyber incident response capabilities. Coordinate technology response plans with organizational emergency preparedness and continuity activities.
• Digital Transformation and Innovation: Identify, evaluate, and responsibly implement technologies that improve workflows, service reliability, employee experience, and organizational effectiveness. Establish governance for automation, artificial intelligence, and other emerging technologies, including privacy, security, ethical use, and change-management considerations.
• IT Operations and Service Management: Ensure dependable day-to-day technology operations, responsive user support, effective incident and problem management, asset management, documentation, service-level monitoring, and continuous improvement. Establish metrics and communicate service performance and risks.
• Leadership and Workforce Development: Lead, develop, and retain a high-performing technology team. Define clear roles, accountability, succession planning, professional development, cross-training, and after-hours support expectations appropriate to a 24/7 critical care transport organization.
• Budget and Resource Stewardship: Develop and manage operating and capital budgets for technology, cybersecurity, infrastructure, licensing, staffing, and strategic initiatives. Prepare business cases, prioritize investments, manage total cost of ownership, and demonstrate value and risk reduction.
• Vendor and Contract Management: Oversee technology vendors, consultants, managed service providers, telecommunications carriers, software partners, and other service providers. Lead due diligence, contract and service-level negotiations, performance reviews, data-protection requirements, and risk remediation.
• Project and Change Leadership: Establish disciplined project portfolio management and change-management practices. Ensure technology initiatives include stakeholder engagement, workflow analysis, testing, training, adoption planning, documentation, and post-implementation review.
• Organizational Collaboration: Build strong partnerships across clinical, aviation, communications, ground operations, safety, quality, compliance, finance, human resources, facilities, education, and development. Promote practical, secure, and user-centered technology solutions that support Boston MedFlight's mission and values.
• Other Responsibilities: Perform other duties as assigned in support of organizational priorities and emergency needs.
Qualifications:
• Education: Bachelor's degree in information technology, computer science, cybersecurity, information systems, business administration, healthcare administration, or a related field required. Master's degree preferred.
• Experience: At least 12-15 years of progressively responsible information technology leadership experience, including significant responsibility for personnel, cybersecurity, infrastructure, budgets, vendors, and enterprise-wide initiatives. Executive-level or senior leadership experience strongly preferred.
• Healthcare Environment: Demonstrated understanding of healthcare information privacy, security, compliance, and operational continuity. Experience in healthcare, emergency services, aviation, transportation, public safety, or another mission-critical 24/7 environment preferred.
• Technology Leadership: Strong working knowledge of enterprise networks, cloud and on-premises systems, identity and access management, endpoints, telecommunications, mobile device management, Microsoft products, cybersecurity controls, backup and disaster recovery, and systems integration.
• Governance and Risk: Demonstrated ability to establish technology governance, manage enterprise risk, develop policies and standards, oversee complex vendors, and communicate technology and cybersecurity risk to executives and governing boards.
150 Hanscom Drive, Bedford, MA 01730-2630 | 781-863-2213 | www.BostonMedFlight.org
Workplace Expectations:
• An FBI background and CORI checks will be performed prior to employment. Favorable criminal background check required.
• In compliance with MA DPH, Boston MedFlight requires that all staff are vaccinated against influenza (flu) and COVID-19 as a condition of employment. Medical or religious exemptions will be accepted for the influenza vaccine. A signed waiver must be provided in lieu of Covid-19 vaccination upon hire if declining the vaccine.
• Maintain reliable availability and flexibility to support a 24/7 mission-critical organization, including response to significant technology, cybersecurity, or continuity events.
• Travel between Boston MedFlight locations and to vendor, partner, training, or professional meetings as required.
• Demonstrate integrity, accountability, discretion, collaboration, and commitment to patient safety, information protection, service reliability, and Boston MedFlight's mission and values.
