Director - Cyber Security

Position Summary:

The Director of Cybersecurity is a senior leadership team member responsible for leading, managing, and continuously improving the organization's cybersecurity program across a complex enterprise environment. Reporting directly to the Chief Information Security Officer (CISO), this role serves as the operational leader of cybersecurity and is responsible for executing the organization's security strategy, reducing cyber risk, protecting critical assets, and ensuring the resilience of business and clinical operations.

The Director of Cybersecurity provides leadership across cybersecurity Operations, Incident Response, Vulnerability Management, Security Engineering, Identity and Access Management (IAM), Governance, Risk and Compliance, Third-Party Risk Management, and Security Training and Awareness.

Cybersecurity Program Leadership

• Lead the day-to-day management and execution of the enterprise cybersecurity program.

• Develop, implement, and maintain cybersecurity strategies, roadmaps, policies, standards, and procedures.

• Serve as a strategic advisor to the CISO.

Security Operations & Threat Management

• Provide leadership and oversight of Security Operations Center (SOC) functions.

• Lead threat detection, incident response, and crisis management activities.

Security Engineering & Infrastructure Protection

• Direct security engineering activities supporting enterprise infrastructure, cloud services, applications, and data platforms.

Vulnerability & Exposure Management

• Lead enterprise vulnerability management and attack surface reduction initiatives.

Identity & Access Management

• Provide executive oversight of IAM capabilities including Multi-factor Authentication (MFA), Privileged Access Management (PAM), Single Sign On (SSO), and Identity Governance and Administration (IGA).

Risk Management & Governance

• Lead cybersecurity risk assessment, treatment, and reporting activities.

Regulatory Compliance & Audit Support

• Support audits, regulatory reviews, and compliance requirements.

Cloud Security & Emerging Technology

• Oversee security governance for cloud platforms and emerging technologies.

Third-Party Risk Management

• Lead vendor management and third-party cybersecurity risk assessments.

Leadership & Team Development

• Lead, mentor, and develop cybersecurity team members.

Position Qualification:

Education

• Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, Engineering, or related field.

Required

• Minimum 12 years of progressive cybersecurity experience.

• Minimum 7 years of progressive leadership experience managing cybersecurity teams, with at least 3 years in a senior leadership (Manager or above) position.

• Experience in regulated or mission-critical environments.

• Experience developing cybersecurity strategy, policy, and governance programs.

• Experience developing and managing operating and capital budgets.

• Experience presenting cybersecurity risks and controls to leadership, partners, and other stakeholders.

• Experience working with industry recognized cybersecurity frameworks including NIST, HITRUST, and CIS.

• CISSP or CISM certification.

Preferred

• Master's Degree in Cybersecurity, Information Assurance, Business or other related field.

• Experience in Academic Health System or other complex healthcare environment

• CCSP, CRISC, CISA, CGRC, GIAC certifications, cloud security certifications, TOGAF, SABSA.