Manager IS Cyber Security

At Northwestern Medicine, every patient interaction makes a difference in cultivating a positive workplace. This patient‑first approach is what sets us apart as a leader in the healthcare industry. As an integral part of our team, you'll have the opportunity to join our quest for better health care, no matter where you work within the Northwestern Medicine system. We pride ourselves on providing competitive benefits: from tuition reimbursement and loan forgiveness to 401(k) matching and lifecycle benefits, our goal is to take care of our employees.

Ready to join our quest for better?

The Manager, IS Cyber Security
, reflects the mission, vision, and values of NM, adheres to the organization’s Code of Ethics and Corporate Compliance Program, and complies with all relevant policies, procedures, guidelines and other regulatory and accreditation standards. The Manager, IS Cyber Security leads the team driving governance, risk, and compliance across the enterprise. In this role, you’ll oversee third‑party risk management, ensure adherence to HIPAA, PCI, and NIST standards, and strengthen security operations through policy reviews, vendor assessments, and workforce training.

Ideal candidates bring 5+ years of IT security leadership experience, strong vendor negotiation skills, and certifications such as CRISC, CISA, or CISM. Responsibilities include, but are not limited to, Threat and Vulnerability Management, Logging and Monitoring, Endpoint Protection, Incident Response, Medical Device Security, Identity Access Management, Privileged Access Management, Application and Cloud Security. This individual will also help to develop and deliver IS security standards, best practices, architecture, and systems to ensure security across the enterprise, implement procedures for auditing and addressing non‑compliance to information security standards, migrate non‑compliant systems to compliant systems, and help to ensure the organization is adhering to security industry best practices.

This individual should possess a robust operational understanding of Security Operations and Identity technologies while also demonstrating leadership capabilities in guiding a technical team. This individual will provide input to strategic decisions that affect IS security, oversee the budget, and handle complex issues that may involve Sr. Leadership, Legal, HR, Compliance, Privacy, Law Enforcement, or other regulatory bodies.

Northwestern Medicine Information Services drives innovative, high‑value solutions to transform health care.

We are committed to supporting the relentless pursuit of better medicine by providing exceptional service to our patients and guests as well as internal clients across the organization. To ensure excellence, our team goes to extraordinary lengths to ensure that our systems work together seamlessly.

Northwestern Medicine understands that technology plays an integral role in shaping the future of health care. Information Services strategically supports the organization by:

• Leveraging AI, automation and rollout of advanced cyber controls that support digital transformation strategies
• Implementing advanced technologies in clinical and administrative areas
• Furthering development of the end user support model to help enhance modern infrastructure

• Manage projects, processes, resources and support activities within Security.
• Manage vendor relationships, contracts and contract management policies for cost effectiveness, negotiate licensing agreements, plan for major software/infrastructure upgrades, and ensure that service management processes are used.
• Demonstrate the ability to deal with the changing environment and to lead/facilitate and manage change efficiently and effectively where appropriate.
• Manage operating and capital budgets to meet NMHC budget goals.
• Develop and maintain strong working relationships to collaborate and partner with peers and key stakeholders.
• Provide for twenty‑four‑hour support for technical issues and incident response.
• Participate in related and relevant international and national professional organizations, and represent the NMHC at appropriate national…