<div class="content-intro"><p><u><strong>About Take Command</strong></u></p> <p>Take Command is a start-up on a mission to improve the healthcare system, starting with health insurance. Pragmatically speaking, we help employers reimburse employees for individual insurance instead of offering a traditional one-size-fits-all group plan. We believe this model can empower employees (when they have the right support) to be savvy healthcare consumers and have a transformative impact on the entire healthcare system.</p> <p>Let’s be honest—health insurance is usually a confusing, frustrating, and even emotional experience for people. We want to fix that with a new model, great technology, and a superior user experience. We have made a great start, but we need your help to fully realize our long-term vision.</p></div><p><strong><span data-contrast="none">About the Director, IT & Information Security Role:</span></strong><span data-ccp-props="{}"> </span></p> <p><span data-contrast="none">We’re seeking a hands-on and strategic Director of Information Technology & Information Security to lead Take Command’s corporate IT operations and own our information security program end to end. Reporting to our VP, Enterprise Operations (with this reporting line expected to shift to our CTO as the function matures), you’ll keep our technology running smoothly for every employee while building the security controls, policies, and compliance posture — including HIPAA and SOC 2 — that protect our members, customers, and business. This is a unique opportunity for an experienced IT and security leader who thrives in a fast-paced, high-growth startup and is excited about building a best-in-class function from the ground up, managing a small team out of our Dallas, TX office (hybrid or onsite).</span><span data-ccp-props="{}"> </span></p> <p><span data-ccp-props="{}"> </span></p> <p><strong><span data-contrast="none">Key Responsibilities:</span></strong><span data-ccp-props="{}"> </span></p> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1"><strong><span data-contrast="none">IT Operations & Infrastructure:</span></strong><span data-contrast="none"> Own the day-to-day operation, availability, and performance of our corporate IT environment — including endpoint management, identity and access management (IAM), collaboration tools, cloud services, and network systems. Develop and maintain an IT roadmap that aligns technology investments with our growth.</span><span data-ccp-props="{}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="2" data-aria-level="1"><strong><span data-contrast="none">Information Security & Compliance:</span></strong><span data-contrast="none"> Own and continuously evolve Take Command’s information security program, including strategy, roadmap, policies, standards, and technical controls that protect company, employee, and member data, including protected health information (PHI). Establish clear security governance and decision-making frameworks, including risk escalation and acceptance processes, and advise executive leadership on material technology and security risks. Lead our HIPAA and SOC 2 compliance efforts.</span><span data-ccp-props="{}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="3" data-aria-level="1"><strong><span data-contrast="none">Risk Management, Incident Response, & Business Continuity:</span></strong><span data-contrast="none"> Design and maintain a proactive security risk management program, including regular risk assessments and vulnerability management. Own incident response planning and execution — detection, containment, communication, and post-incident review. Lead technology business continuity and disaster recovery planning, ensuring we have practical, tested plans to restore critical systems and operations when disruptions occur.</span><span data-ccp-props="{}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="4" data-aria-level="1"><strong><span data-contrast="none">Vendor & Budget Management:</span></strong><span data-contrast="none"> Manage relationships, contracts, and spend with IT vendors, managed service providers (MSPs), and SaaS providers. Own the IT budget and drive cost-effective technology decisions.</span><span data-ccp-props="{}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-p