Director, Cybersecurity (Security Officer)

Unified Women's Healthcare • UNAVAILABLE, Georgia

5d

About The Position

The Cybersecurity Officer serves as the organization’s senior cybersecurity executive, responsible for advancing the enterprise cybersecurity strategy and operating model. Reporting to the Chief Information Officer, the role advises executive leadership and directs decisions involving cyber risk, information protection, technology resilience, regulatory readiness, and security investments. The position leads cybersecurity governance, risk management, security operations, incident response, regulatory compliance, third-party security risk, security architecture, and data protection, translating complex cyber risk into executive-level insight and integrating security into business strategy, technology planning, vendor management, and operational execution. The Cybersecurity Officer partners closely with infrastructure leadership to align strategy, architecture, priorities, shared resources, dependencies, and accountability across the technology environment. Leading across organizational boundaries, the role directs internal and external security resources, establishes measurable outcomes, and holds stakeholders accountable for a mature, risk-based security posture that protects information assets, supports business continuity, strengthens regulatory confidence, and preserves stakeholder trust.

Requirements

• Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Computer Science, Business Administration, Risk Management, or a related field required; Master’s degree in a related field preferred.
• Minimum of 10 years of progressive experience in cybersecurity, information security, technology risk management, IT audit, or related technology leadership roles required, including at least 5 years leading cybersecurity programs, teams, vendors, or enterprise security initiatives at a manager level or above.
• Professional certification such as CISSP, CISM, CISA, CRISC, HCISPP, GIAC, or equivalent cybersecurity, risk, audit, or compliance certification required or must be obtained within an established timeframe based on business needs.
• Demonstrated ability to design, operationalize, and mature enterprise cybersecurity programs, including governance, risk management, compliance, security operations, incident response, vulnerability management, identity and access management, third-party security risk, and security awareness.
• Advanced working knowledge of cybersecurity frameworks, control environments, and regulatory expectations such as NIST Cybersecurity Framework, NIST 800-53, ISO 27001/27002, HIPAA Security Rule, HITECH, HITRUST, PCI DSS, SOX, SOC 2, and other standards applicable to the organization’s operating environment.
• Proven ability to frame complex technical, regulatory, and cyber risk matters as enterprise business issues; influence senior leadership decisions; and produce executive-ready recommendations, board-level materials, policies, governance updates, and decision-support communications.
• Experience leading enterprise programs, people, budgets, vendors, managed service providers, consultants, and cross-functional teams in a complex, regulated environment; must demonstrate sound executive judgment, risk-based prioritization, operational discipline, and the ability to drive accountability for measurable cybersecurity outcomes.
• Strong executive presence, business acumen, strategic judgment, communication, collaboration, negotiation, change leadership, stakeholder influence, and relationship management skills required, including the ability to operate effectively with senior leadership and across highly matrixed teams.

Nice To Haves

• Master’s degree in a related field preferred.

Responsibilities

• Defines and leads the enterprise cybersecurity vision, strategy, operating model, roadmap, governance structure, policies, standards, and performance measures. Sets program direction in alignment with enterprise strategy, risk tolerance, technology priorities, regulatory obligations, and executive leadership expectations.
• Directs enterprise cybersecurity risk governance, including risk assessments, risk register oversight, control maturity evaluations, risk acceptance decisions, remediation prioritization, third-party/vendor security risk review, and executive-level reporting on material cyber risks, business impacts, trends, and mitigation strategies.
• Provides executive oversight of security operations and cyber defense capabilities, including threat detection, vulnerability management, endpoint/network/email/cloud security, identity and access management, monitoring, escalation processes, and sustained improvement of security controls, tools, services, and operational performance.
• Serves as the cybersecurity executive partner to IT, Legal, Compliance, Privacy, Internal Audit, Operations, and business leadership. Influences enterprise technology decisions, embeds security-by-design principles into major initiatives, and ensures cybersecurity considerations are integrated into strategic planning, architecture decisions, vendor solutions, and data protection practices.
• Builds and leads cybersecurity capability across people, process, technology, and external partnerships. Directs internal staff, matrixed stakeholders, managed service providers, consultants, and vendor partners; establishes goals, budgets, service expectations, performance metrics, resource plans, and leadership development priorities.
• Leads enterprise cybersecurity incident preparedness and response, including executive escalation protocols, incident response plans, tabletop exercises, investigation coordination, recovery support, post-incident reviews, and cross-functional decision-making with IT, Legal, Compliance, Privacy, Operations, and executive leadership.
• Owns cybersecurity compliance and audit readiness by ensuring appropriate controls, evidence, reporting, and remediation processes are in place for applicable regulatory, contractual, privacy, and security framework requirements, including HIPAA, HITECH, NIST, ISO 27001, HITRUST, PCI, SOX, or other applicable standards.
• Supports cybersecurity awareness, policy adoption, and training communications to promote employee understanding of information protection responsibilities.
• Participates in internal and external audits, regulatory reviews, cyber insurance assessments, client security questionnaires, and due diligence activities as requested.
• Monitors emerging cyber threats, security technologies, regulatory changes, and industry best practices to inform future program enhancements.
• Architects and secures IAM capabilities in support of over 18,000 identities across multiple affiliate regions and care center environments.
• Represents the cybersecurity function in governance committees, enterprise planning discussions, vendor reviews, and cross-functional workgroups as needed.
• Other duties as assigned.

Benefits

• Medical, dental, and vision plans, fertility benefits, and supplemental insurance options.
• Vacation, personal days, and paid holidays to help you recharge.
• 401(k) with employer contribution, plus Flexible Spending Accounts (FSAs) and Health Savings Accounts (HSAs).
• Short- and long-term disability, paid parental leave, basic life insurance, and optional additional coverage.
• Employee Assistance Program, commuter benefits, pet insurance, and identity theft protection.
• Opportunities and resources to support your career growth.

What This Job Offers

• Job Type: Full-time
• Career Level: Executive