Director, Cybersecurity – Engineering, Operations and Incident Response

University of Wisconsin Hospitals and Clinics Authority•Madison, WI

3d•Hybrid

About The Position

Work Schedule: This is a full-time, 40 hours per week position scheduled to work Monday through Friday, with core hours between the hours of 8:00 AM – 5:00 PM. Applicants hired into this position can work hybrid from WI or IL. This will be discussed during the interview process. Be part of something remarkable Join the #1 hospital in Wisconsin! We are seeking a Director, CyberSecurity – Engineering, Operations and Incident Response to: Lead a talented team of cybersecurity professionals in the areas of evaluation, design architecture, deployment, and support of traditional, as well as leading-edge information security solutions. Act as a technical leader and point of escalation to provide technical direction to team members and evangelize best practices and methodologies. Develop technologies and strategies that align with established information security frameworks. Stay current on applicable security industry trends both offensive and defensive including applicable technology strategies, incident response, and potential impact to UWHealth’s IT environment. Protect company assets with new security strategies, monitoring controls, and ongoing evaluation. Cultivate strong working relationships with other infrastructure teams, engineers, architects, vendors, contractors, and leadership. Understand business needs and processes for area of responsibility. Align technical information security strategy with overall business goals.

Requirements

Bachelor's Degree in Healthcare, Computer Science, Information Systems, Engineering, Business, Healthcare Administration or related field
Demonstrated success working across the systems development or operational life cycle.
Demonstrated success operational levels within Information Security programs, including IT Security Strategy, IT Security Operations, Security Training and Awareness, IT General Controls Compliance & Audit Management, Cyber security programs, and Identity and Access Management.
Demonstrated success managing security infrastructure — e.g., firewalls, intrusion prevention systems (IPSs), web application firewalls (WAFs), endpoint protection, SIEM and log management technology.
Demonstrated success designing and securing applications and infrastructures in cloud environments.
Demonstrated success leading Governance, Risk and Compliance initiatives.
Demonstrated success leading incident response activities.
Certified Information System Security Professional (CISSP), Certified Information Systems Manager (CISM), or Certified Information Systems Auditor (CISA) Upon Hire

Nice To Haves

Master's Degree in IS Security, Business Administration, or Healthcare Administration
10+ years extensive project and leadership experience resulting in greater levels of responsibility and leadership based upon proven success.
Previous work experience with federal and state privacy and security laws, regulations, and accreditation standards for maintaining information security and confidentiality
7 years direct patient care delivery and operational management experience
Proven experience in collaboration and development of successful partnerships between IT and operations.
Significant prior experience leading IT Systems support staff.
Experience supporting systems and/or operations in a 24x7 hospital setting.
CPHIMS, PMP, ITIL
Various Vendor Certifications as relevant for the position, such as Certified Cloud Security Professional (CCSP), Healthcare Information Security and Privacy Professional (HCISPP), Certified in Risk and Information Systems Controls (CRISC)

Responsibilities

Lead a talented team of cybersecurity professionals in the areas of evaluation, design architecture, deployment, and support of traditional, as well as leading-edge information security solutions.
Act as a technical leader and point of escalation to provide technical direction to team members and evangelize best practices and methodologies.
Develop technologies and strategies that align with established information security frameworks.
Stay current on applicable security industry trends both offensive and defensive including applicable technology strategies, incident response, and potential impact to UWHealth’s IT environment.
Protect company assets with new security strategies, monitoring controls, and ongoing evaluation.
Cultivate strong working relationships with other infrastructure teams, engineers, architects, vendors, contractors, and leadership.
Understand business needs and processes for area of responsibility.
Align technical information security strategy with overall business goals.