How you will make an impact

• Develop and implement an enterprise-wide information security program, policies, and procedures that protect against unauthorized access, use, disclosure, modification, destruction, or disruption of information and information systems
• Ensure the confidentiality, integrity, and availability of information and systems, and minimize risk to the company’s operations
• Maintain a deep understanding of the threat landscape and industry best practices, and provide guidance to the executive team and other stakeholders on emerging security risks, trends, and issues
• Establish and maintain effective relationships with internal and external stakeholders, including business partners, vendors, regulators, and auditors
• Manage the security incident response program, including incident identification, investigation, containment, and resolution
• Oversee the security risk management program, including risk assessments, vulnerability management, and third-party risk management
• Develop and manage the security awareness and training program for all employees, contractors, and third-party users
• Provide regular reports to executive management and the Board of Directors on the status of the information security program, key risks, and emerging threats

What we are looking for

• Bachelor’s degree in computer science, information technology, or related field; Master’s degree preferred
• At least 10 years of experience in information security, with a focus on healthcare or banking industries
• Strong understanding of regulatory requirements related to information security and privacy, including HIPAA, HITECH, NIST, PCI and FedRamp or TX-RAMP
• Experience developing and implementing an enterprise-wide information security program, policies, and procedures
• Experience managing security incidents, conducting investigations, and providing guidance on security risks and issues
• Strong leadership, communication, and interpersonal skills, with the ability to build relationships and influence others
• Industry certifications such as CISSP, CISM, or CRISC are preferred
• Experienced in the latest security frameworks and technologies