Dir Cybersecurity

Overview

Covenant Health is the region’s top‑performing healthcare network with 10 hospitals, outpatient and specialty services, and Covenant Medical Group, our area’s fastest‑growing physician practice division. Headquartered in Knoxville, Covenant Health is a community‑owned integrated healthcare delivery system and the area’s largest employer. Our more than 11,000 employees, volunteers, and 1,500 affiliated physicians are dedicated to improving the quality of life for the more than two million patients and families we serve each year.

Covenant Health is the only healthcare system in East Tennessee to be named a Forbes “Best Employer” seven times.

The Director of Cybersecurity reports to the Chief Information Security Officer (CISO) and is responsible for overseeing cybersecurity operations and strategy within Covenant Health. This role ensures the Confidentiality, Integrity, and Availability of information assets, particularly sensitive data (PHI). It involves setting the vision and direction for cybersecurity services, implementing standards and security policies, managing technical implementation projects, and maintaining financial and budgetary responsibilities.

The position also manages a large vendor and external partner ecosystem, leads personnel management, and develops strategic cybersecurity roadmaps in collaboration with IT and clinical technology teams to secure sensitive data and ensure compliance with HIPAA regulations.

• Leadership:
  Direct and provide leadership to all cybersecurity staff, including Security Analysts, Incident Responders, and Compliance Specialists.
• Change Agent:
  Support and lead the efforts to change team cultures, dynamics, processes, and technologies that provide modern solutions to the organization.
• Team Management:
  Lead cybersecurity team to ensure performance management and career development. Provide technical leadership and direction, delegate responsibilities, and identify management development opportunities. Work closely with other leaders throughout IT and the organization to educate, inform, and assist their understanding and acceptance of Cybersecurity efforts and controls.
• Staff Development:
  Provide leadership, development, coaching, and guidance to ensure the appropriate departmental developmental goals are set and achieved.
• Ongoing Continuous Development:
  Champion innovative efforts and stay abreast of leading‑edge solutions for recruitment, development, and retention of the cybersecurity workforce.
• Cybersecurity Operations:
  Oversee day‑to‑day operations of cybersecurity measures, including monitoring, detection, and response to security incidents.
• Incident Response:
  Lead the incident response team in managing and resolving security breaches and incidents.
• Compliance:
  Ensure compliance with HIPAA and other relevant regulations and standards.
• Technical Implementation:
  Lead technical implementation projects related to cybersecurity, creating plans and strategies to meet the needs of the organization.
• Continuous Improvement:
  Stay informed about emerging technologies and industry trends, making recommendations for improvement.
• Strategic Planning:
  Develop and maintain strategic cybersecurity roadmaps, provide tactical action plans, and ensure optimum planning of cybersecurity projects and resources.
• Resource Planning:
  Conduct proactive resource planning based on anticipated demand.
• Milestone Establishment:
  Establish deliverables and projected milestones for solution delivery in partnership with business leaders and Senior Executives.
• Technical
  
  Roadmap:
  
  Lead the development of cybersecurity strategies and technical roadmap, ensuring integration with overall IT and organizational strategies.
• Vendor Management:
  Manage relationships with cybersecurity vendors, ensuring that contracts and agreements are in place and that vendor performance meets organizational standards.
• Budget Management:
  Develop annual operating budgets and long‑term capital budgets for cybersecurity projects.
• Performance Monitoring:
  Monitor network and systems performance, ensuring availability and reliability. Perform capacity planning.
• Service Management:
  Oversee…