Director of Cyber Security

The Director of Cybersecurity is a senior leadership team member responsible for leading, managing, and continuously improving the organization's cybersecurity program across a complex enterprise environment. Reporting directly to the Chief Information Security Officer (CISO), this role serves as the operational leader of cybersecurity and is responsible for executing the organization's security strategy, reducing cyber risk, protecting critical assets, and ensuring the resilience of business and clinical operations.

The Director of Cybersecurity provides leadership across cybersecurity Operations, Incident Response, Vulnerability Management, Security Engineering, Identity and Access Management (IAM), Governance, Risk and Compliance, Third-Party Risk Management, and Security Training and Awareness.

• Lead the day-to-day management and execution of the enterprise cybersecurity program.
• Develop, implement, and maintain cybersecurity strategies, roadmaps, policies, standards, and procedures.
• Serve as a strategic advisor to the CISO.

• Provide leadership and oversight of Security Operations Center (SOC) functions.
• Lead threat detection, incident response, and crisis management activities.

• Direct security engineering activities supporting enterprise infrastructure, cloud services, applications, and data platforms.

• Lead enterprise vulnerability management and attack surface reduction initiatives.

• Provide executive oversight of IAM capabilities including Multi-factor Authentication (MFA), Privileged Access Management (PAM), Single Sign On (SSO), and Identity Governance and Administration (IGA).
• Lead cybersecurity risk assessment, treatment, and reporting activities.

• Support audits, regulatory reviews, and compliance requirements.

• Oversee security governance for cloud platforms and emerging technologies.

• Lead vendor management and third-party cybersecurity risk assessments.

• Lead, mentor, and develop cybersecurity team members.

• Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, Engineering, or related field.

• Minimum 12 years of progressive cybersecurity experience.
• Minimum 7 years of progressive leadership experience managing cybersecurity teams, with at least 3 years in a senior leadership (Manager or above) position.
• Experience in regulated or mission-critical environments.
• Experience developing cybersecurity strategy, policy, and governance programs.
• Experience developing and managing operating and capital budgets.
• Experience presenting cybersecurity risks and controls to leadership, partners, and other stakeholders.
• Experience working with industry recognized cybersecurity frameworks including NIST, HITRUST, and CIS.
• CISSP or CISM certification.

• Master’s Degree in Cybersecurity, Information Assurance, Business or other related field.
• Experience in Academic Health System or other complex healthcare environment
• CCSP, CRISC, CISA, CGRC, GIAC certifications, cloud security certifications, TOGAF, SABSA.