Director, Information Security

The Institute for Healthcare Improvement (IHI) is a leading, globally recognized not-for-profit health care improvement organization that has been applying evidence-based quality improvement methods to meet current and future health care challenges for more than 30 years. IHI provides millions of people in health care with methods, tools, and resources to make care better, safer, and more equitable; convenes experts to enable knowledge sharing and peer-learning;

and advises health systems and hospitals of all sizes in improving their systems and outcomes 's mission is to innovate and lead transformational improvement in health and health care worldwide.

Full Time

$96,171.00- $

Remote, USA

The Institute for Healthcare Improvement (IHI) is a leading, globally recognized not-for-profit health care improvement organization that has been applying evidence-based quality improvement methods to meet current and future health care challenges for more than 30 years. IHI provides millions of people in health care with methods, tools, and resources to make care better, safer, and more equitable; convenes experts to enable knowledge sharing and peer-learning;

and advises health systems and hospitals of all sizes in improving their systems and outcomes 's mission is to innovate and lead transformational improvement in health and health care worldwide.

The Information Security Director will be responsible for ensuring the confidentiality, integrity, and availability of all information assets within the organization. You will lead the development and implementation of the organization’s information security strategy, policies, and procedures.

In this role, you will also be responsible for ensuring compliance with all relevant laws, regulations, and industry standards. You will be responsible for identifying and mitigating information security risks, managing security incidents, and providing security awareness training to employees. The role requires a high level of technical expertise in information security, risk management, compliance, and governance.

This role will require a visionary leader who understands the global information security & risk impacts, and has a sound understanding of cybersecurity technology tools, methods and processes. This role requires a leader who works with business stakeholders, assesses needs, builds awareness and develops informed strategy and direction for information security.

Responsibilities include but are not limited to the following:

• Develop and manage a targeted information security awareness training program for all employees, contractors and approved system users, and establish metrics to measure the effectiveness of this security training program for the different audiences
• Lead cross-functional Information Security Steering Committee, infusing information security governance procedures that foster resiliency, raise awareness, govern policy and review cybersecurity related activities
• Provide clear risk mitigating directives for projects with components in IT, including the mandatory application of controls
• Foster a "Security Awareness Champions" program to spread the word and infuse security awareness behaviors, cybersecurity risks and policies
• Perform annual risk assessment and business impact analysis
• Assist in performing audits using industry standard security methods to help strengthen internal security controls, procedures and policies
• Investigate security incidents, develop remediation plans, and work with appropriate stakeholders to implement resolutions

• Manage…