Director Chief Information Security Officer - IT Infrastructure and Operations

JOB DESCRIPTION

The Chief Information Security Officer (CISO) provides strategic leadership for the organization's cybersecurity and information protection programs, ensuring the security of protected health information (PHI), critical systems, and sensitive data. The CISO leads enterprise risk management, regulatory compliance, security operations, incident response, and business continuity efforts while aligning security initiatives with organizational goals, patient safety, and care continuity. Through collaboration, governance, and security awareness, the CISO helps safeguard the organization against evolving threats and supports the secure delivery of healthcare services.

KNOWLEDGE/EXPERIENCE:

Education and Experience

• Minimum 2 years of progressive experience in Information Security, with at least 2 years in a senior leadership/executive role (CISO or equivalent) preferred.
• Deep and demonstrated expertise in the healthcare industry, with a strong understanding of clinical workflows, EHR systems, and the protection of PHI preferred.

Certifications (Preferred)

• Certified Information Security Manager (CISM)
• Certified Information Systems Security Professional (CISSP)
• Certified Chief Information Security Officer (CCISO)
• HITRUST CSF Practitioner (CCSFP)

Required Skills And Competencies

• Cybersecurity Technologies: Expertise with enterprise-grade security architecture, including IAM, cloud security (AWS/Azure/GCP), network segmentation, and advanced threat detection tools.
• Risk Management: Proven track record of conducting and managing enterprise risk assessments and developing effective mitigation strategies.

EDUCATION: Bachelor’s degree in Computer Science, Information Security, or a related field. Master's degree preferred.

QUALIFICATIONS

KNOWLEDGE/EXPERIENCE:

Education and Experience

• Minimum 2 years of progressive experience in Information Security, with at least 2 years in a senior leadership/executive role (CISO or equivalent) preferred.
• Deep and demonstrated expertise in the healthcare industry, with a strong understanding of clinical workflows, EHR systems, and the protection of PHI preferred.

Required Skills And Competencies

• Cybersecurity Technologies: Expertise with enterprise-grade security architecture, including IAM, cloud security (AWS/Azure/GCP), network segmentation, and advanced threat detection tools.
• Risk Management: Proven track record of conducting and managing enterprise risk assessments and developing effective mitigation strategies.

EDUCATION: Bachelor’s degree in Computer Science, Information Security, or a related field. Master's degree preferred.