VP - Chief Information Security Officer

Prisma Health•Greenville, SC

3d•Onsite

About The Position

Responsible for the organization's Information Security Program, including daily operations of the IT security program, integrated risk management, oversight of the annual and ongoing risk assessment process, development and maintenance of policies and procedures, protection of electronic protected health information, program compliance monitoring, and investigation and tracking of incidents and breaches in compliance with federal and state law. Serves as the health system designated security official under the HIPAA Security Rule. Builds and maintains a strategic information security program and fosters cybersecurity awareness across the health system. Oversees architectural security design reviews, evaluates threats and vulnerabilities, manages security incidents, and ensures disaster recovery, business continuity, and incident response plans are maintained and tested. Collaborates with senior management and compliance leaders on program governance, informs the Board of Directors, supports consistent sanctions for security violations, and cooperates with regulators and law enforcement in compliance reviews and investigations. The role has direct reports and management responsibilities.

Requirements

Bachelor's degree in Information Systems or a related field of study.
Ten years of health industry IT and information security management experience.
Certified Information Systems Security Professional (CISSP) certification.
Computer skills, including word processing, spreadsheets, databases, and data entry.
Mathematical skills.
Communication skills.
Collaboration and problem-solving skills.
Knowledge of office equipment.
Knowledge and experience with state and federal information security laws and regulations, including HIPAA, NIST, and PCI.
Familiarity with healthcare legislation and standards concerning health information protection and patient security.

Responsibilities

Build and maintain a strategic information security program, including current policies, standards, procedures, and practices that minimize risk and protect information confidentiality, integrity, and availability.
Oversee and collaborate on architectural security design reviews for existing and new infrastructure, including identity and access management, networking, platforms, medical devices, and IaaS, PaaS, and SaaS services.
Promote cybersecurity awareness and behavioral changes across the ITS organization and the health system.
Evaluate security trends, threats, risks, and vulnerabilities and apply tools to mitigate risk.
Manage security incidents and events involving ePHI, PII, and corporate sensitive data.
Ensure disaster recovery, business continuity, and incident response plans are maintained and tested according to policy.
Ensure the health system and joint venture partners comply with administrative, technical, and physical safeguards.
Collaborate with senior management, the Privacy Officer, and the Corporate Compliance Officer to establish security program governance and keep the Board of Directors informed.
Partner with Human Resources and the Privacy Officer to ensure consistent sanctions for security violations.
Cooperate with federal and state regulators, legal entities, and law enforcement during compliance reviews or investigations.
Perform other duties as assigned.
Directly and/or indirectly supervise team members, including management responsibilities and direct reports.