Tonal

2 weeks ago

Director, IT & Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 1 hour agoStatus: Live

Job Summary

Own Tonal’s IT and security function end-to-end, delivering secure and compliant operations as the company expands into healthcare. Lead HIPAA technical controls and security program execution, including penetration testing remediation and incident response. Govern AI tool usage with policy, DLP, and prompt-injection protections, and mature identity governance and automation using Okta, SCIM, and RBAC. Manage the IT & Security team, SaaS portfolio, and global infrastructure across locations.

Location: Austin

Workplace: Remote

Employment Type: Full time

Job Function: Executive & General Management

Seniority: Director level

Key Responsibilities

•Own end-to-end IT operations, including device lifecycle, onboarding/offboarding, SaaS administration, identity and access management, help desk, and office infrastructure.
•Lead technical HIPAA controls implementation (HIPAA Security Rule and HITECH Act), including encryption, SIEM, MDM/EDR, and role-based access.
•Own Tonal’s security program, including penetration testing remediation, security policy, tabletop exercises, vendor security reviews, and incident response.
•Govern Tonal’s AI tool ecosystem, including licensing and spend, API key governance, DLP and prompt-injection protections, and organizational AI best practices.
•Lead and grow the IT & Security team and manage global physical infrastructure (networking, Wi-Fi, AV, and physical access).

Pay and Benefits

Salary: USD 178,000 - 220,000 annually

Key Requirements

•10+ years in IT and security leadership with experience across identity and access management, endpoint security, SaaS administration, and security program management.
•Hands-on HIPAA compliance implementation experience, beyond writing policies.
•Track record building a security program end-to-end, including policy, penetration testing, and real incident response.
•Broad expertise across identity and access management, endpoint security, SaaS administration, and network infrastructure.
•Strong people leadership skills, with a start-up mindset in fast-moving, resource-constrained environments.

Experience:HealthcareClinical-grade softwareAI securityHIPAA

Skills:LeadershipPrioritizationCommunicationStart-up mindsetDiscretion

Certifications:SOC 2 Type IINIST CSFHITRUST

Tech Stack:HIPAAHITECHEncryptionSIEMMDM/EDRRole-based accessRBACOkta Identity GovernanceSCIMWorkflow automationAPI key governanceDLPPrompt injection protectionsPenetration testingSaaS administrationSCIM-based provisioningWi-FiAV

Company Brief

Tonal

Designs and sells a connected home strength-training system combining digital weight hardware, personalized coaching, and AI-driven workouts. Tonal offers subscription-based fitness programming, performance tracking, and guided resistance training for at-home users.

Industry: Fitness

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Series E+

Headquarters: San Francisco, United States

Founded: 2015

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Tonal

2 weeks ago

Director, IT & Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 1 hour agoStatus: Live

Job Summary

Location: Austin

Workplace: Remote

Employment Type: Full time

Job Function: Executive & General Management

Seniority: Director level

Key Responsibilities

•Own end-to-end IT operations, including device lifecycle, onboarding/offboarding, SaaS administration, identity and access management, help desk, and office infrastructure.
•Lead technical HIPAA controls implementation (HIPAA Security Rule and HITECH Act), including encryption, SIEM, MDM/EDR, and role-based access.
•Own Tonal’s security program, including penetration testing remediation, security policy, tabletop exercises, vendor security reviews, and incident response.
•Govern Tonal’s AI tool ecosystem, including licensing and spend, API key governance, DLP and prompt-injection protections, and organizational AI best practices.
•Lead and grow the IT & Security team and manage global physical infrastructure (networking, Wi-Fi, AV, and physical access).

Pay and Benefits

Salary: USD 178,000 - 220,000 annually

Key Requirements

•10+ years in IT and security leadership with experience across identity and access management, endpoint security, SaaS administration, and security program management.
•Hands-on HIPAA compliance implementation experience, beyond writing policies.
•Track record building a security program end-to-end, including policy, penetration testing, and real incident response.
•Broad expertise across identity and access management, endpoint security, SaaS administration, and network infrastructure.
•Strong people leadership skills, with a start-up mindset in fast-moving, resource-constrained environments.

Experience:HealthcareClinical-grade softwareAI securityHIPAA

Skills:LeadershipPrioritizationCommunicationStart-up mindsetDiscretion

Certifications:SOC 2 Type IINIST CSFHITRUST

Company Brief

Tonal

Industry: Fitness

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Series E+

Headquarters: San Francisco, United States

Founded: 2015

Website LinkedIn