Deputy CISO and Cybersecurity Architect

Join Lurie Children’s as a Deputy CISO and Cybersecurity Architect and help shape a hospital-wide security transformation and enterprise security architecture. This onsite role in Streeterville, IL provides executive-level ownership of target-state security design, transformation planning, and prioritization, with a focus on aligning security capabilities to clinical operations, digital initiatives, and regulatory requirements.

• Develop and govern the enterprise cybersecurity target-state architecture and the multi-year transformation roadmap
  .
• Build and mature a scalable,
  internally owned security operating model and delivery capability.
• Act as a technical lead to senior risk leaders, delivering technical guidance and risk modeling to support executive decision-making.
• Define and enforce security architecture standards across cloud
  , on-prem
  , identity
  , network
  , endpoint
  , application
  , and data environments.
• Drive the technical execution of security initiatives, ensuring solutions remain architecturally sound and sustainable.
• Collaborate with IT
  , Digital
  , Clinical
  , and Infrastructure leadership to embed security into technology delivery and operations.
• Serve as executive decision authority for security architecture, risk tradeoffs, and technical strategy.
• Support executive and board-level communications on security strategy, risk posture, and transformation progress.
• Ensure alignment with healthcare regulatory and compliance frameworks, including HIPAA
  , NIST
  , and PCI
  .
• Grow internal security architecture and engineering capabilities, including roles, skills, and operating processes.
• Establish metrics and reporting for the overall cyber program, security maturity, risk identification, risk reduction, and program performance.

• Extensive experience in cybersecurity leadership, security architecture, or security transformation roles.
• Deep knowledge of enterprise security architecture,
  cloud security
  , identity and access management
  , detection and response
  , and network and endpoint security
  .
• Proven ability to lead large-scale, multi-year security modernization programs.
• Strong executive communication and stakeholder management skills, including board and senior leadership engagement.
• Ability to translate business and clinical needs into practical,
  risk-based security strategies.
• Healthcare or other highly regulated environment experience preferred.
• Knowledge of relevant frameworks and regulations, including NIST
  , HIPAA
  , and PCI
  .
• Ability to build and lead high-performing technical and architectural teams.
• Strategic, systems-level thinking with hands-on technical credibility.
• Relevant certifications (e.g.,
  CISSP
  , CISM
  , CCSP
  ) preferred.

HIPAA
, NIST
, PCI
, CISSP
, CISM
, CCSP

Location: 680 Lake Shore Drive (onsite)

Pay range: USD 180,960 to 298,584 per year

For full time and part time employees who work 20 or more hours per week, Lurie Children’s offers a generous benefits package.

• Medical, dental and vision insurance
• Employer paid group term life and disability
• Employer contribution toward Health Savings Account
• Flexible Spending Accounts
• Paid Time Off (PTO), Paid Holidays and Paid Parental Leave
• 403(b) with a 5% employer match
• Supplemental Life, AD and Disability
• Critical Illness, Accident and Hospital Indemnity coverage
• Tuition assistance
• Student loan servicing and support
• Adoption benefits
• Backup Childcare and Eldercare
• Employee Assistance Program, and other specialized behavioral health services and resources for employees and family members
• Discount on services at Lurie Children’s facilities
• Discount purchasing program

Lurie Children’s utilizes certain AI-enabled features within our recruiting platform to support candidate engagement and assist recruiters in identifying and prioritizing applicants whose experience aligns with job requirements. All employment decisions are made by individuals. For questions about the use of AI in this process or additional support, contact people questions
.