Director, Cybersecurity – Engineering, Operations and Incident Response

UW Health • Madison, WI

5d • $159,665 - $239,497 • Hybrid

About The Position

We are seeking a Director, CyberSecurity – Engineering, Operations and Incident Response to lead a talented team of cybersecurity professionals in the areas of evaluation, design architecture, deployment, and support of traditional, as well as leading-edge information security solutions. This role acts as a technical leader and point of escalation, providing technical direction to team members and evangelizing best practices and methodologies. The Director will develop technologies and strategies that align with established information security frameworks, stay current on applicable security industry trends (both offensive and defensive), and protect company assets with new security strategies, monitoring controls, and ongoing evaluation. Cultivating strong working relationships with other infrastructure teams, engineers, architects, vendors, contractors, and leadership is crucial, as is understanding business needs and processes to align technical information security strategy with overall business goals.

Requirements

• Bachelor's Degree in Healthcare, Computer Science, Information Systems, Engineering, Business, Healthcare Administration or related field Required
• Demonstrated success working across the systems development or operational life cycle. Required
• Demonstrated success operational levels within Information Security programs, including IT Security Strategy, IT Security Operations, Security Training and Awareness, IT General Controls Compliance & Audit Management, Cyber security programs, and Identity and Access Management. Required
• Demonstrated success managing security infrastructure — e.g., firewalls, intrusion prevention systems (IPSs), web application firewalls (WAFs), endpoint protection, SIEM and log management technology. Required
• Demonstrated success designing and securing applications and infrastructures in cloud environments. Required
• Demonstrated success leading Governance, Risk and Compliance initiatives. Required
• Demonstrated success leading incident response activities. Required
• Certified Information System Security Professional (CISSP), Certified Information Systems Manager (CISM), or Certified Information Systems Auditor (CISA) Upon Hire Required

Nice To Haves

• Master's Degree in IS Security, Business Administration, or Healthcare Administration Preferred
• 10+ years extensive project and leadership experience resulting in greater levels of responsibility and leadership based upon proven success. Preferred
• Previous work experience with federal and state privacy and security laws, regulations, and accreditation standards for maintaining information security and confidentiality Preferred
• 7 years direct patient care delivery and operational management experience Preferred
• Proven experience in collaboration and development of successful partnerships between IT and operations. Preferred
• Significant prior experience leading IT Systems support staff. Preferred
• Experience supporting systems and/or operations in a 24x7 hospital setting. Preferred
• CPHIMS, PMP, ITIL Preferred
• Various Vendor Certifications as relevant for the position, such as Certified Cloud Security Professional (CCSP), Healthcare Information Security and Privacy Professional (HCISPP), Certified in Risk and Information Systems Controls (CRISC) Preferred

Responsibilities

• Lead a talented team of cybersecurity professionals in the areas of evaluation, design architecture, deployment, and support of traditional, as well as leading-edge information security solutions.
• Act as a technical leader and point of escalation to provide technical direction to team members and evangelize best practices and methodologies.
• Develop technologies and strategies that align with established information security frameworks.
• Stay current on applicable security industry trends both offensive and defensive including applicable technology strategies, incident response, and potential impact to UWHealth’s IT environment.
• Protect company assets with new security strategies, monitoring controls, and ongoing evaluation.
• Cultivate strong working relationships with other infrastructure teams, engineers, architects, vendors, contractors, and leadership.
• Understand business needs and processes for area of responsibility. Align technical information security strategy with overall business goals.

Benefits

• health and dental insurance
• paid time off
• retirement plans
• two-week paid parental leave
• adoption assistance
• Options for a variety of schedules and shifts that offer flexibility and allow for work-life balance
• Access to great resources through the UW Health Employee Wellbeing Department that supports your emotional, financial, and physical well-being
• Tuition benefits eligibility - UW Health invests in your professional growth by helping pay for coursework associated with career advancement
• The opportunity to earn a referral bonus for referring friends, former colleagues or others to apply for open, posted positions

What This Job Offers

• Job Type: Full-time
• Career Level: Director