Director, IT & Security

About the Company

Tonal is the world's most intelligent strength training system, combining hardware, software, AI, computer vision, and world-class content to help people build strength and live healthier. Tonal is now expanding into healthcare and clinical applications, connecting strength training technology with providers, employers, and payers to deliver measurable health outcomes.

Responsibilities

• Own end-to-end IT operations including device lifecycle, SaaS administration, and identity and access management
• Lead technical controls for HIPAA compliance, implementing safeguards like encryption, SIEM, and MDM/EDR
• Execute the security program including penetration testing remediation, security policy, and incident response
• Govern the AI tool ecosystem, including licensing, API key governance, and corporate AI policy
• Manage the IT & Security team, budget, and global physical infrastructure across multiple offices

Requirements

• 10+ years in IT and security leadership with full functional ownership
• Hands-on HIPAA compliance implementation experience
• Proven track record of building a security program from the ground up

Preferred Qualifications

• Experience with SOC 2 Type II, NIST CSF, or HITRUST
• Background in healthcare technology or digital health environments
• Experience managing large SaaS portfolios and vendor negotiations