Friday, May 17, 2024
Panoramic Health
Come Join our team!!
The Director, Information Security is a senior leadership position responsible for leading and overseeing Panoramic Health's information security function. This role is critical in safeguarding the confidentiality, integrity, and availability of our organization's information assets and technology products. The director develops and implements comprehensive strategies, policies, and procedures to identify and mitigate risks, ensure compliance with industry regulations, and responds effectively to security incidents.
Responsibilities
Develop and implement the organization's information security strategy, aligning it with business objectives and risk tolerance.
Identify and prioritize security initiatives, establish security goals, and create a roadmap for their implementation.
Conduct regular risk assessments to identify and evaluate potential security threats and vulnerabilities.
Develop and implement risk mitigation strategies, including security controls, policies, and procedures.
Monitor and manage security risks through ongoing assessments and the implementation of appropriate safeguards.
Develop and maintain a culture of security awareness through formal and informal security awareness training.
Establish and enforce information security policies, standards, guidelines, and procedures.
Ensure compliance with relevant laws, regulations, and industry best practices.
Lead incident response efforts in the event of security breaches or incidents.
Coordinate with relevant teams to investigate, contain, and remediate security issues promptly.
Establish governance frameworks for information security.
Ensure compliance with legal and regulatory requirements (e.g., HIPAA, PCI, HITRUST)
Work closely with stakeholders across the organization to promote a culture of security.
Align information security practices with business objectives and collaborate with executive leadership.
Develop your team to assure high quality support for all stakeholders.
Manage the technical safeguards and assure that they are performing as required.
Review emerging technologies for fit and update the information security roadmap accordingly.
Build and maintain relationships with external partners, such as security vendors, service providers, auditors and industry peers.
Stay informed about emerging threats, best practices, and regulatory changes.
Provide guidance and direction on security matters to executive leadership and board members.
Advocate for the necessary resources and support to maintain a strong security posture.
Qualifications:
Bachelor's degree strongly preferred in Information Technology or equivalent work experience.
An advanced degree in Information Systems, Business, Planning, or a related field is a plus.
5+ years leadership experience of building and leading Information Security teams and programs in mid to large healthcare delivery systems
Proven experience in managing healthcare GRC programs, including HITRUST policy & technical control management and security risk assessment
Proven experience in information security leadership roles.
Industry certifications (e.g., CISSP, CISM, CRISC) are highly desirable.
Strong knowledge of HIPAA, HITRUST, CIS and NIST security frameworks, risk management, and compliance.
Excellent communication and leadership skills.
The Company is committed to the principles of equal employment. We are committed to complying with all federal, state, and local laws providing equal employment opportunities, and all other employment laws and regulations. It is our intent to maintain a work environment which is free of harassment, discrimination, or retaliation because of age, race, color, national origin, ancestry, religion, sex, pregnancy (including childbirth, lactation and related medical conditions), physical or mental disability, genetic information (including testing and characteristics), veteran status, uniformed servicemember status, or any other status protected by federal, state, or local laws. The company is dedicated to the fulfillment of this policy in regard to all aspects of employment, including but not limited to recruiting, hiring, placement, transfer, training, promotion, rates of pay, and other compensation, termination, and all other terms, conditions, and privileges of employment
The Company is committed to the principles of equal employment. We are committed to complying with all federal, state, and local laws providing equal employment opportunities, and all other employment laws and regulations. It is our intent to maintain a work environment which is free of harassment, discrimination, or retaliation because of age, race, color, national origin, ancestry, religion, sex, pregnancy (including childbirth, lactation and related medical conditions), physical or mental disability, genetic information (including testing and characteristics), veteran status, uniformed servicemember status, or any other status protected by federal, state, or local laws. The company is dedicated to the fulfillment of this policy in regard to all aspects of employment, including but not limited to recruiting, hiring, placement, transfer, training, promotion, rates of pay, and other compensation, termination, and all other terms, conditions, and privileges of employment
For information about our Privacy Policy, please visit here
#LI-MR1
#J-18808-Ljbffr
