Chief Information Security Officer (CISO)

The Company is seeking a Chief Information Security Officer (CISO) to lead its enterprise-wide information security program and protect information assets and technology across a healthcare network. Responsibilities include setting security strategy and governance, leading risk assessments and incident response, and overseeing access controls, vendor risk, security policies, and regulatory compliance. The CISO will partner with IT teams on secure infrastructure and cloud initiatives, manage cybersecurity awareness and business continuity, and report security posture and program maturity to executive leadership and the Board. The role also includes managing the security budget and overseeing medical device and AI security governance. Candidates must hold a bachelor’s degree in information systems, computer science, cybersecurity, or a related field, and a CISSP certification. Required experience includes 7–10 years in IT infrastructure, with at least five years in information security leadership, plus healthcare security and risk management experience within HIPAA/HITECH frameworks. Candidates should have expertise in cloud, SD-WAN, and virtual desktop security, and knowledge of the NIST Cybersecurity Framework, ISO 27001, and Zero Trust architectures. Familiarity with AI/ML security governance, strong analytical and communication skills, sound judgment, and the ability to prioritize and lead effectively in high-pressure environments are also required.