Summary:Reporting to the Chief Information Officer (CIO) and serving as the senior technical executive of the Health Information Technology (HIT) division, the Chief Technology Officer (CTO) is accountable for the technology foundation of the Alaska Native Tribal Health Consortium (ANTHC): enterprise infrastructure, network and telecommunications, information security, and enterprise architecture. The CTO sets enterprise technical strategy and standards for all of HIT, owns the organization's technology roadmap and security posture, and ensures that the platforms and architecture underpinning clinical and business services are reliable, secure, and built to scale. As a key contributor to enterprise strategic planning and a member of the HIT senior leadership team, the CTO advises executive leadership on emerging technology and risk, and serves as a potential successor to the CIO.
Responsibilities:Set and own the enterprise technology strategy and roadmap for HIT, ensuring that current and planned architecture, investments, and solutions align with organizational objectives. Establish and enforce enterprise technical standards, policies, and governance across infrastructure, security, and architecture, including a technical architecture review function and defined hardware and software lifecycle management standards.
Direct enterprise infrastructure operations, including network, telecommunications, servers, data center, and hybrid cloud environments, balancing cost, performance, and compliance, and establishing and tracking availability and performance Service Level Goals (SLGs) for systems supporting 24/7 clinical operations. Drive standardization and integration of infrastructure across ANTHC facilities, statewide field sites, and Tribal health partner environments, reducing variation, risk, and support cost. Own the enterprise information security program, ensuring the confidentiality, integrity, and availability of ANTHC systems and data, including cyber security program management and compliance, incident response, and identity and access management.
Establish and maintain network and security standards for connected biomedical and Internet of Medical Things (IoMT) devices, in partnership with the clinical and biomedical teams accountable for the devices themselves. Maintain and enforce an out-of-band escalation path so that confirmed critical security and operational events route directly to the CIO and Chief Operating Officer (COO) without delay, bypassing normal routing. Own enterprise and solution architecture, maintaining current and target state architecture roadmaps, and directing systems integration and interfaces across the application and technology landscape. Ensure that technical architecture, data storage, and access controls reflect ANTHC's data stewardship and data sovereignty obligations, which extend beyond standard regulatory compliance. Govern product development as a last-resort capability, ensuring that commercial buy-and-configure solutions are the default and that custom development is undertaken only when other options are exhausted, is justified, and is held to defined lifecycle and support standards. Direct implementation coordination and technical program management for enterprise initiatives, ensuring that commitments are properly planned, staffed, monitored, and reported.
Own capital and operating budget planning and financial stewardship for the technology portfolio, including infrastructure and security investment parameters, and oversight of vendor and managed service agreements for technology, telecommunications, and security. Proactively advise executive leadership on emerging technologies, security threats, and technical trends most relevant to ANTHC's goals and evolving needs. Lead enterprise-wide disaster recovery and business continuity planning for the technology environment. Build strong, collaborative relationships with clinical, business, and Tribal health organization leaders, translating their needs into a secure and resilient technical foundation. Implement effective organizational design; hire, develop, evaluate, reward, and retain a high-performing team of technology and security professionals; and foster a culture of innovation, transparency, and accountability.
Performs other duties as assigned.
Other information:
KNOWLEDGE AND SKILLS:- Broad, hands-on expertise across enterprise infrastructure, networking, telecommunications, servers, and cloud environments.
- Deep knowledge of enterprise information security, including security program management, compliance, incident response, and identity and access management.
- Strong enterprise and solution architecture capability, including systems integration and interface standards.
- Ability to create and communicate a clear technical vision and to build consensus around standards and enterprise initiatives.
- Exceptional business acumen, including capital planning, investment analysis, and return on investment.
- Excellent negotiating skills with internal customers and external service providers, and strong vendor and contract management knowledge.
- Exceptional communication and organizational skills, both oral and written, including the ability to translate complex technical concepts into clear operational, clinical, and financial terms for non-technical stakeholders.
- Comfortable with ambiguity; able to handle the unexpected with flexibility and sound judgment.
- Knowledge of confidentiality rules and regulations, including the Health Insurance Portability and Accountability Act (HIPAA), the Health Information Technology for Economic and Clinical Health (HITECH) Act, and National Institute of Standards and Technology (NIST) cyber security frameworks.
- Familiarity with the operating environment of a healthcare organization, including clinical system availability expectations and regulatory obligations.
- Knowledge of ITIL (Information Technology Infrastructure Library).
- Demonstrated ability to recruit, develop, and motivate a high-performing team that values transparency and accountability.
MINIMUM EDUCATION QUALIFICATIONA Master's degree in Computer Science, Information Systems, Business Administration, or a related field. An equivalent combination of education and progressively responsible professional experience may be substituted for the Master's degree on a year-for-year basis. Two (2) years of additional qualifying experience beyond the Minimum Experience Qualification is considered equivalent to a Master's degree.
MINIMUM EXPERIENCE QUALIFICATIONNon-supervisory - Twelve (12) years of progressively responsible technology experience across enterprise infrastructure, networking, information security, or architecture, including senior technical leadership.
AND
Supervisory - Eight (8) to ten (10) years of senior management-level experience across multiple technical domains, with accountability for strategic planning, operations, financial management, and people management and development.
MINIMUM CERTIFICATION QUALIFICATIONN/A
PREFERRED CERTIFICATION QUALIFICATIONITIL foundations certification (or current equivalent) is preferred. A recognized information security certification (such as CISSP) is preferred.
ADDITIONAL REQUIREMENTSMay be required to work outside the traditional work schedule.
May be called out to work off-shift in emergency situations.
According to the needs of the organization, some incumbents in this job class may be required to obtain specific technical certifications.
