Director of IT Security

Monument Health•Rapid City, SD

About The Position

The Director of IT Security is a strategic and operational leader responsible for the development, implementation, and oversight of the organization’s cybersecurity program. Reporting to the Senior Director of Technology and Security, the role serves as the primary advisor to executive leadership and the Board of Directors on matters of information security, risk management, and regulatory compliance. This role ensures the protection of sensitive patient data, clinical systems, and enterprise infrastructure while fostering a culture of security across all departments. This leader will bring deep expertise in healthcare regulations (HIPAA, HITECH, HITRUST), a strong executive presence, and the ability to translate complex technical risks into actionable business insights. Monument Health offers competitive wages and benefits on qualifying positions. Some of those benefits can include: Supportive work culture Medical, Vision and Dental Coverage Retirement Plans, Health Savings Account, and Flexible Spending Account Instant pay is available for qualifying positions Paid Time Off Accrual Bank Opportunities for growth and advancement Tuition assistance/reimbursement Excellent pay differentials on qualifying positions Flexible scheduling

Requirements

Bachelor's degree Information Systems or Related Field
5+ years Management experience
5+ years Information Technology experience
5+ years Information Security experience

Nice To Haves

Certified Information Security Manager (CISM) - Accredited University or accredited training professionals; or Certified Information Systems Security Professional (CISSP) - Accredited University or accredited training professionals or Certified Information Systems Auditor (CISA) - Accredited University or accredited training professionals

Responsibilities

Develop and maintain a comprehensive cybersecurity strategy aligned with business goals and risk tolerance.
Prepare and deliver regular briefings to executive leadership and the Board on security posture, emerging threats, and mitigation strategies.
Lead and manage the Cybersecurity team and oversee the day-to-day operations of the information security program, including monitoring, threat detection, and response.
Develop and continuously evaluate and evolve Monument Health's information security roadmap and posture.
Develop, implement, and monitor a comprehensive enterprise information security and risk management program.
Align and prioritize actions within the cybersecurity program that align with Monument Health’s strategic goals, meets the needs of our operational units and focuses on data protection, threat management, and risk mitigation.
Oversee incident response planning, and the investigation of any security incidents, ensuring timely reporting to the executive team and all relevant stakeholders.
Provide regular reports to the executive team and boards on the status of the information security program and emerging threats.
Implement, manage and enforce information security directives as mandated by Federal and State regulations, including but not limited to the Health Insurance Portability and Accountability Act (HIPAA).
Develop and enforce policies, procedures and standards; oversee caregiver security awareness training programs that promote a culture of security.
Work in collaboration with the Business Continuity Coordinator to ensure that disaster recovery and business continuity needs of the organization are properly addressed.
All other duties as assigned.