AVP, Deputy Chief Information Security Officer

CCHCS Cook Children's Health Care System; United States; On-site; USD 150,000 - 230,000; Full time

Job summary

Cook Children’s Health Care System seeks an Associate Vice President, Deputy Chief Information Security Officer to lead enterprise cybersecurity strategy and architecture. You will guide security design, standards, and integration, partnering with functional leaders to drive priorities and accountability.

Role includes risk assessment, modernization, and third-party security integration. You will support incident response, crisis management, and executive communications while representing the

Qualifications

• Bachelor's degree required; advanced degree a plus.
• 10 years in information technology security healthcare experience preferred.
• Experience devising, implementing, and maintaining information security management framework.
• Strong knowledge of HIPAA, HITRUST, ISO 27001, NIST, PCI-DSS, etc.
• Advanced information security technology knowledge.
• Experience managing information security incidents and escalation.

Responsibilities

• Lead cybersecurity architecture and security design across the enterprise.
• Oversee security architecture review to align with risk tolerance.
• Drive program maturity, governance, and measurable outcomes.
• Coordinate risk identification, assessment, and mitigation with stakeholders.
• Support incident response, crisis management, and executive communications.

Skills

Security architecture

Stakeholder engagement

Incident response

HIPAA compliance

NIST/PCI-DSS

Education

Bachelor's degree

Advanced degree preferred

Job description

Location: Rosedale Office Building Department: IS Administration Shift: First Shift (United States of America) Standard Weekly Hours: 40

Summary

The Associate Vice President, Deputy Chief Information Security Officer supports the CISO in executing the enterprise cybersecurity strategy, priorities, and multi-year transformation roadmap. Provide direct leadership and oversight of cybersecurity architecture, including security design, technical standards, and enterprise security integration. Partner with cybersecurity functional leaders to coordinate operational priorities, strengthen execution, and drive cross-functional accountability. Guide the development and implementation of security capabilities across operations, engineering, identity and access management, and data protection. Oversee the security architecture review process, ensuring emerging technologies, infrastructure, and enterprise initiatives align with security requirements and risk tolerance. Drive cybersecurity program maturity, operational effectiveness, continuous improvement, and measurable performance outcomes. Support enterprise cybersecurity risk identification, assessment, mitigation, and escalation in collaboration with business, technology, and risk stakeholders. Lead strategic cybersecurity initiatives, including modernization, automation, emerging technology security, and third-party security integration. Support cybersecurity incident response, crisis management, executive communications, and operational decision-making. Serve as a senior cybersecurity advisor and delegate for the CISO, providing leadership continuity and representing the Office of the CISO as assigned.

Qualifications

• Bachelors Degree required;
• advanced degree a plus.
• 10 years in information technology security Healthcare experience preferred.
• Previous experience of devising, implementing, and maintaining information security management framework.
• Strong working knowledge of relevant laws, regulation, and standards relating to information security, including HIPAA, HITRUST, ISO 27001, NIST, PCI-DSS, etc.
• Advanced knowledge of information security technology.
• Experience of dealing with and containing information security incidents.
• Ability to engage and influence a broad range of internal stakeholder (e.g. HR, IT, Legal, Compliance, senior management, etc.).
• Given the confidentiality needs of this role, the highest levels of personal integrity, professionalism, judgment, and maturity are expected.

Certification / Licensure

Professional certification such as Certified Information Systems Security Professional (CISSP) and/or Certified Information Security Manager (CISM) preferred.

About Us

Cook Children’s is an equal opportunity employer. As such, Cook Children’s offers equal employment opportunities without regard to race, color, religion, sex, age, national origin, physical or mental disability, pregnancy, protected veteran status, genetic information, or any other protected class in accordance with applicable federal laws.

These opportunities include terms, conditions and privileges of employment, including but not limited to hiring, job placement, training, compensation, discipline, advancement and termination.

Cook Children’s is a Texas-only employer. If you are hired, you will need to maintain your primary residence within the state of Texas, along with all licenses and credentials required for your position throughout your employment.

Promise, a strong word with deep meaning that everyone understands—especially kids. This is the foundation of our organization and what drives us to blaze new trails in medical care, research, advanced technology, as well as programs and initiatives that benefit children who may not otherwise have access to quality health care. Every day our employees come to work with the intention of keeping our Promise. It's the guiding principle that helps our patients and their families get better and stay healthy. As a member of our Cook Children's team, you can be an important part of making that happen.