Chief Information Security Officer Jobs

About The Position

Requirements

• Bachelor's degree in cybersecurity, information technology, computer science, healthcare administration, business, or a related field.
• Minimum 10 years of progressive IT, cybersecurity, or technology risk management experience.
• At least 5 years leading cybersecurity teams, programs, or enterprise security initiatives.
• Demonstrated experience building or improving enterprise cybersecurity programs.
• Strong operational knowledge of security monitoring, incident response, identity and access management, security architecture, and risk management.
• Experience coordinating complex technology projects, regulatory remediation, and cross-functional initiatives.
• Exceptional executive communication, stakeholder management, and collaborative leadership skills.

Nice To Haves

• Cybersecurity leadership experience within healthcare organizations.
• Knowledge of HIPAA Security requirements, NIST Cybersecurity Framework, clinical technologies, and electronic health record environments.
• Public-sector or similarly complex enterprise experience.
• CISSP, CISM, CISA, CRISC, HCISPP, or comparable professional certification.
• Advanced degree in a relevant discipline.

Responsibilities

• Develop and execute a multiyear cybersecurity strategy and improvement roadmap.
• Oversee security operations, threat monitoring, incident response, vulnerability management, and ransomware preparedness.
• Direct security initiatives involving infrastructure, cloud services, identity management, clinical systems, medical devices, and emerging technologies.
• Establish cybersecurity metrics, performance dashboards, and executive reporting.
• Lead technology risk assessments, security control evaluations, and regulatory compliance initiatives.
• Oversee HIPAA security requirements and coordinate remediation of technology-related compliance findings.
• Maintain enterprise technology risk registers, corrective-action plans, and documented remediation processes.
• Coordinate cybersecurity audits, regulatory responses, investigations, and evidence-based closure of findings.
• Build effective relationships with executive leadership, Compliance, Privacy, clinical operations, and IT teams.
• Translate complex technical risks into clear recommendations and actionable priorities.
• Coordinate cybersecurity and risk remediation across technical and operational stakeholders.
• Lead security personnel and external service providers, establish priorities, and oversee program delivery.
• Balance patient safety, regulatory compliance, operational continuity, and cybersecurity objectives.