Director of Cybersecurity
About The Position
The Director of Cybersecurity leads DWIHN’s cybersecurity program, including security operations, risk management, governance, regulatory compliance, and incident response. The position also serves as DWIHN’s designated HIPAA Security Officer, overseeing the development, implementation, and maintenance of the administrative, physical, and technical safeguards required by the HIPAA Security Rule. The Director works with IT Services, Privacy, Compliance, Legal, and operational leadership to protect electronic protected health information (ePHI), address security risks, and support the secure delivery of behavioral health services. The position reports to the Vice President of IT Services. This is a hybrid position, with work performed onsite and remotely. Occasional travel and after-hours availability may be required for cybersecurity incidents, audits, or critical implementations.
Requirements
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field.
- 7 years of progressive cybersecurity experience, including 3 years in management.
- Experience leading security operations, incident response, risk assessments, audits, and HIPAA security compliance activities.
- Thorough knowledge of the HIPAA Security Rule, HIPAA security risk analysis and risk management, NIST frameworks, and healthcare information security requirements.
- Experience with Microsoft 365, cloud security, endpoint protection, and identity management.
- Strong supervisory, communication, organizational, and analytical skills.
Nice To Haves
- Healthcare, behavioral health, or public-sector experience.
- CISSP, CISM, CISA, CHPS, or CRISC certification.
Responsibilities
- Lead, supervise, mentor, and evaluate cybersecurity staff and establish priorities.
- Develop and maintain security policies, standards, procedures, and controls.
- Oversee security monitoring, threat detection, vulnerability management, and incident response.
- Coordinate incident investigations, containment, recovery, documentation, and escalation.
- Oversee network, endpoint, cloud, identity, logging, and data protection controls.
- Lead cybersecurity risk assessments, penetration testing, and remediation tracking.
- Coordinate security audits, including DWIHN’s SOC for Cybersecurity examination.
- Serve as the designated HIPAA Security Officer, coordinating HIPAA Security Rule compliance activities and working with the Privacy Officer, Compliance, and Legal on overlapping privacy and security matters.
- Oversee HIPAA security risk analysis and risk management, security policies and procedures, workforce security awareness, security incident procedures, contingency planning, and periodic evaluation of safeguards for ePHI.
- Align security practices with NIST CSF 2.0, NIST SP 800-53, and CIS Controls.
- Evaluate vendor security risks and contractual security requirements.
- Integrate cybersecurity into IT projects and system implementations.
- Support business continuity and disaster recovery planning and testing.
- Oversee employee security awareness training.
- Maintain security records, risk registers, and audit evidence.
- Manage assigned security budgets, resources, and vendors.
- Report cybersecurity risks, incidents, and remediation status to the VP of IT Services.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Director
