Director Information Security

Director of Information Security

Remote | Healthcare Provider Organization | Executive Leadership Opportunity

Shape the Future of Cybersecurity in Healthcare

A growing healthcare provider organization is seeking a strategic and collaborative Director of Information Security to lead the continued evolution of its enterprise cybersecurity program.

This is a highly visible leadership opportunity for an experienced security professional who enjoys influencing organizational strategy, partnering with executive leadership, and building a security-first culture across a complex healthcare environment. The Director of Information Security will play a critical role in protecting patient information, strengthening organizational resilience, managing enterprise risk, and advancing cybersecurity maturity throughout the organization.

This position offers the rare opportunity to make a meaningful impact while helping shape the future direction of information security within a mission-driven healthcare organization.

What You'll Be Responsible For

• Lead the organization's enterprise information security strategy, governance framework, and cybersecurity roadmap
• Develop and mature security policies, standards, procedures, and organizational best practices
• Oversee enterprise risk management, security assessments, vulnerability management, and remediation planning
• Ensure compliance with HIPAA, regulatory requirements, industry frameworks, and security standards
• Partner with executive leadership to communicate cybersecurity risks, priorities, and recommendations
• Develop security metrics, dashboards, and executive-level reporting for leadership and governance committees
• Lead third-party risk management and vendor security review processes
• Guide incident response preparedness, business continuity, and disaster recovery planning efforts
• Promote security awareness and cybersecurity education across the organization
• Collaborate with clinical, operational, and technology leaders to integrate security into organizational initiatives and technology investments
• Support the protection of critical healthcare systems, patient information, clinical applications, and enterprise technologies
• Evaluate emerging threats and recommend proactive measures to strengthen the organization's security posture

Why This Opportunity Stands Out

• Fully remote leadership position
• Opportunity to influence enterprise-wide technology and cybersecurity strategy
• Direct interaction with executive leadership and key organizational stakeholders
• Ability to shape and mature a growing information security program
• Mission-driven healthcare environment focused on serving patients and communities
• Broad organizational impact across clinical, operational, and technology functions
• Strong culture of collaboration, innovation, and continuous improvement
• Strategic role balancing long-term vision with operational execution

Ideal Experience

• 8+ years of progressive information security, cybersecurity, or risk management experience
• Experience leading enterprise security programs within hospitals, health systems, healthcare providers, or other highly regulated environments
• Strong knowledge of cybersecurity frameworks including NIST, CIS Controls, HITRUST, ISO 27001, and HIPAA Security requirements
• Demonstrated experience with governance, risk management, compliance, and security program development
• Experience presenting security strategy, risk assessments, and organizational priorities to executive leadership and governance committees
• Knowledge of incident response, vulnerability management, business continuity, and third-party risk management
• Ability to translate technical security concepts into business-focused discussions
• Strong relationship-building and leadership skills with the ability to influence across multiple departments
• Bachelor's degree or equivalent experience required
• CISSP, CISM, CRISC, HCISPP, or related certifications preferred

If you're a cybersecurity leader who enjoys building relationships, influencing strategy, and strengthening security programs that directly support patient care and organizational success, we'd welcome the opportunity to connect.