Director of Cybersecurity

Category:

Professional City:

Jackson State:

Tennessee

Shift: 0 - Day (United States of America)

Job Description

Summary:

The Cybersecurity Director is responsible for developing the organization’s security strategy and overseeing the operational execution of the organization’s cybersecurity program. This role ensures the protection for sensitive patient and personal data, critical healthcare systems, and operational continuity across all facilities. The Director collaborates with the CIO to implement strategic security initiatives, manages a team of cybersecurity professionals, and ensures regulatory compliance.

ESSENTIAL JOB FUNCTIONS:

Strategic Security Leadership Develop and execute a comprehensive cybersecurity strategy aligned with the organization’s overall business objectives.

Identify security goals, objectives, and metrics; provide periodic reporting on the status of the information security program to key stakeholders and the Board.

Collaborate with executive and operational leadership to ensure alignment between security strategies and business needs.

Budget Management Develop and manage the budget for the department, justifying expenditures for tools and staff.

Forecast spending projects for up to three years.

Risk Assessment & Management Oversee regular security risk assessments, vulnerability scans, and penetration testing, ensuring that mitigation measures are promptly addressed.

Maintain and evolve the organization’s risk management framework, prioritizing resources and projects based on risk impact.

Work with Directors across the organization to help assess cybersecurity risk in all areas.

Regulatory Compliance Responsible for compliance with healthcare-specific regulations such as HIPAA, HITECH, and state privacy laws.

Develop, maintain, and enforce policies, standards, guidelines, and procedures to meet regulatory requirements.

Working with the entire organization, select additional frameworks as needed or desired to provide value to the organization.

Team Leadership & Development Manage and mentor a team of cybersecurity analysts and engineers, providing guidance on professional development and continuous improvement.

Foster a culture of collaboration and knowledge sharing within the security team and across IT departments.

Allocate resources and delegate responsibilities effectively.

Security Culture Promote a security-focused culture across the organization, ensuring staff are equipped to identify and report suspicious activity.

Develop security champions across the organization to support and promote security initiatives in their departments.

Develop the Cybersecurity and Risk Management Steering Committee (CRM Steering Committee) with representatives from various departments including, but not limited to, Executive Leadership, IT, Legal, HR, Finance, Compliance, Clinical, Operations, Sales/Marketing, and Facilities.

Partner with HR to enforce security policies and accountability.

Educate leadership on their role in supporting cybersecurity.

Collaboration & Stakeholder Engagement Work closely with clinical and administrative stakeholders to understand operational needs while maintaining a secure infrastructure.

Communicate cybersecurity risks, mitigation strategies, and operational impacts clearly and effectively to non-technical stakeholders using metrics that are tailored to the need of the key stakeholder.

Organize & lead organizational IT security audits and assessments required by HIPAA, PCI, and other selected frameworks.

Monitors industry security updates, technologies and best practices to improve security management.

Demonstrates expertise in project management to include the use of tools; plan and schedule tasks based on project timeline, establish tasks and appropriate dependence to set timeline and achieve desired target dates.

Serves as a resource for the Cybersecurity team.

Serves in an advisory role to all organizational departments in matters of security outside of cybersecurity in relation to HIPAA and other regulatory requirements, including but not limited to physical security, information security including paper records, etc.

Leads incident response and crisis management.

Ability…