Director – Cybersecurity - Security Officer

Overview

Unified is a nationwide community of providers, operations specialists and thought leaders who look for the greatest opportunities to impact every woman’s health, at every stage of their journeys. We are unparalleled in our scale and ability to adapt to address unmet and underserved needs. Through 815+ clinics, 23 IVF labs, nationwide telehealth capabilities and targeted case management, our 2,700+ independent, affiliated providers deliver comprehensive women’s health services and continuously work to implement methods and develop techniques or platforms that improve the healthcare experience. We remain focused on enabling the discovery of new ways for our affiliated providers to deliver the high-quality care experience women deserve, in the ways they most wish to receive it, and collaborate across our community to make our vision a reality.

The Cybersecurity Officer serves as the organization’s senior cybersecurity executive, responsible for advancing the enterprise cybersecurity strategy and operating model. Reporting to the Chief Information Officer, the role advises executive leadership and directs decisions involving cyber risk, information protection, technology resilience, regulatory readiness, and security investments. The position leads cybersecurity governance, risk management, security operations, incident response, regulatory compliance, third-party security risk, security architecture, and data protection, translating complex cyber risk into executive-level insight and integrating security into business strategy, technology planning, vendor management, and operational execution. The Cybersecurity Officer partners closely with infrastructure leadership to align strategy, architecture, priorities, shared resources, dependencies, and accountability across the technology environment. Leading across organizational boundaries, the role directs internal and external security resources, establishes measurable outcomes, and holds stakeholders accountable for a mature, risk-based security posture that protects information assets, supports business continuity, strengthens regulatory confidence, and preserves stakeholder trust.

Responsibilities

• Defines and leads the enterprise cybersecurity vision, strategy, operating model, roadmap, governance structure, policies, standards, and performance measures. Sets program direction in alignment with enterprise strategy, risk tolerance, technology priorities, regulatory obligations, and executive leadership expectations.
• Directs enterprise cybersecurity risk governance, including risk assessments, risk register oversight, control maturity evaluations, risk acceptance decisions, remediation prioritization, third-party/vendor security risk review, and executive-level reporting on material cyber risks, business impacts, trends, and mitigation strategies.
• Provides executive oversight of security operations and cyber defense capabilities, including threat detection, vulnerability management, endpoint/network/email/cloud security, identity and access management, monitoring, escalation processes, and sustained improvement of security controls, tools, services, and operational performance.
• Serves as the cybersecurity executive partner to IT, Legal, Compliance, Privacy, Internal Audit, Operations, and business leadership. Influences enterprise technology decisions, embeds security-by-design principles into major initiatives, and ensures cybersecurity considerations are integrated into strategic planning, architecture decisions, vendor solutions, and data protection practices.
• Builds and leads cybersecurity capability across people, process, technology, and external partnerships. Directs internal staff, matrixed stakeholders, managed service providers, consultants, and vendor partners; establishes goals, budgets, service expectations, performance metrics, resource plans, and leadership development priorities.
• Leads enterprise cybersecurity incident preparedness and response, including executive escalation protocols, incident response plans, tabletop exercises, investigation coordination, recovery support, post-incident reviews, and cross-functional decision-making with IT, Legal, Compliance, Privacy, Operations, and executive leadership.
• Owns cybersecurity compliance and audit readiness by ensuring appropriate controls, evidence, reporting, and remediation processes are in place for applicable regulatory, contractual, privacy, and security framework requirements, including HIPAA, HITECH, NIST, ISO 27001, HITRUST, PCI, SOX, or other applicable standards.

Additional Job Functions:

• Supports cybersecurity awareness, policy adoption, and training communications to promote employee understanding of information protection responsibilities.
• Participates in internal and external audits, regulatory reviews, cyber insurance assessments, client security questionnaires, and due diligence activities as requested.
• Monitors emerging cyber threats, security technologies, regulatory changes, and industry best practices to inform future program enhancements.
• Architects and secures IAM capabilities in support of over 18,000 identities across multiple affiliate regions and care center environments.
• Represents the cybersecurity function in governance committees, enterprise planning discussions, vendor reviews, and cross-functional workgroups as needed.
• Other duties as assigned.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Computer Science, Business Administration, Risk Management, or a related field required; Master’s degree in a related field preferred.
• Minimum of 10 years of progressive experience in cybersecurity, information security, technology risk management, IT audit, or related technology leadership roles required, including at least 5 years leading cybersecurity programs, teams, vendors, or enterprise security initiatives at a manager level or above.
• Professional certification such as CISSP, CISM, CISA, CRISC, HCISPP, GIAC, or equivalent cybersecurity, risk, audit, or compliance certification required or must be obtained within an established timeframe based on business needs.
• Demonstrated ability to design, operationalize, and mature enterprise cybersecurity programs, including governance, risk management, compliance, security operations, incident response, vulnerability management, identity and access management, third-party security risk, and security awareness.
• Advanced working knowledge of cybersecurity frameworks, control environments, and regulatory expectations such as NIST Cybersecurity Framework, NIST 800-53, ISO 27001/27002, HIPAA Security Rule, HITECH, HITRUST, PCI DSS, SOX, SOC 2, and other standards applicable to the organization’s operating environment.
• Proven ability to frame complex technical, regulatory, and cyber risk matters as enterprise business issues; influence senior leadership decisions; and produce executive-ready recommendations, board-level materials, policies, governance updates, and decision-support communications.
• Experience leading enterprise programs, people, budgets, vendors, managed service providers, consultants, and cross-functional teams in a complex, regulated environment; must demonstrate sound executive judgment, risk-based prioritization, operational discipline, and the ability to drive accountability for measurable cybersecurity outcomes.
• Strong executive presence, business acumen, strategic judgment, communication, collaboration, negotiation, change leadership, stakeholder influence, and relationship management skills required, including the ability to operate effectively with senior leadership and across highly matrixed teams.

We’re here for you—both personally and professionally.

Our benefits are designed to support you and your family at every stage of life. From health and wellness to financial security and career growth, we offer a comprehensive package to help you thrive.

Here’s a look at what we offer:

• Health Coverage

Medical, dental, and vision plans, fertility benefits, and supplemental insurance options.

• Paid Time Off

                     Vacation, personal days, and paid holidays to help you recharge.

• Financial & Retirement Planning

401(k) with employer contribution, plus Flexible Spending Accounts (FSAs) and Health Savings Accounts (HSAs).

• Income Protection

Short- and long-term disability, paid parental leave, basic life insurance, and optional additional coverage.

• Wellbeing Support

Employee Assistance Program, commuter benefits, pet insurance, and identity theft protection.

• Professional Development

     Opportunities and resources to support your career growth.