AVP, Deputy Chief Information Security Officer

Location:

Rosedale Office Building

Department:

IS Administration

Shift:

First Shift (United States of America)

Standard Weekly Hours:

40

Summary:

The Associate Vice President, Deputy Chief Information Security Officer supports the CISO in executing the enterprise cybersecurity strategy, priorities, and multi-year transformation roadmap. Provide direct leadership and oversight of cybersecurity architecture, including security design, technical standards, and enterprise security integration. Partner with cybersecurity functional leaders to coordinate operational priorities, strengthen execution, and drive cross-functional accountability. Guide the development and implementation of security capabilities across operations, engineering, identity and access management, and data protection. Oversee the security architecture review process, ensuring emerging technologies, infrastructure, and enterprise initiatives align with security requirements and risk tolerance. Drive cybersecurity program maturity, operational effectiveness, continuous improvement, and measurable performance outcomes. Support enterprise cybersecurity risk identification, assessment, mitigation, and escalation in collaboration with business, technology, and risk stakeholders. Lead strategic cybersecurity initiatives, including modernization, automation, emerging technology security, and third-party security integration. Support cybersecurity incident response, crisis management, executive communications, and operational decision-making. Serve as a senior cybersecurity advisor and delegate for the CISO, providing leadership continuity and representing the Office of the CISO as assigned.

Qualifications:

• Bachelors Degree required; advanced degree a plus.
• 10 years in information technology security
• Healthcare experience preferred.
• Previous experience of devising, implementing, and maintaining information security management framework.
• Strong working knowledge of relevant laws, regulation, and standards relating to information security, including HIPAA, HITRUST, ISO 27001, NIST, PCI-DSS, etc.
• Advanced knowledge of information security technology.
• Experience of dealing with and containing information security incidents.
• Ability to engage and influence a broad range of internal stakeholder (e.g. HR, IT, Legal, Compliance, senior management, etc.).
• Given the confidentiality needs of this role, the highest levels of personal integrity, professionalism, judgment, and maturity are expected.

Certification/Licensure:

• Professional certification such as Certified Information Systems Security Professional (CISSP) and/or Certified Information Security Manager (CISM) preferred.