Chief Information Security Officer (CISO), IT Security

The Company is in search of a Chief Information Security Officer (CISO) to take on a pivotal role in establishing and leading the organization's information security as an independent function. The CISO will be responsible for the development and execution of a multi-year information security roadmap, maturing governance, and leading the security organization. This includes close partnership with the IT Risk Manager, managing vendor relationships for outsourced security services, and providing strategic leadership for the enterprise's information security and cyber resilience program. The ideal candidate will have a Bachelor's degree in a relevant field, with an advanced degree preferred, and hold a CISSP or CISM certification. A minimum of 10 years of information security experience, particularly in a healthcare setting, and 5 years of progressive leadership experience in a similar environment are required. The successful CISO will be the enterprise-wide owner of cybersecurity strategy, governance, architecture, operations, identity and access management, data protection, incident response, and third-party risk management. Key priorities for the role include executive and Board-level reporting, audit readiness for NIST and HIPAA, and the ability to shape multi-year tooling, governance, and staffing decisions. Experience in leading a Zero Trust program, securing a connected medical device and Internet of Medical Things environment, and supporting executive leadership in strategic initiatives are highly valued. The CISO will also be expected to have a strong background in building or maturing a security program with full budget accountability, including the management of outsourced security vendors.