AVP of IT Security

Mount Sinai Medical Center; Miami Beach (FL); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health benefits

Life insurance

Long-term disability

Job summary

Mount Sinai Medical Center is seeking an IT Security Officer to lead the organization’s security program and ensure HIPAA compliance. You will develop, implement, and maintain security policies, perform risk assessments, and coordinate across Privacy, Compliance, Audit, and leadership teams.

The role requires strong incident response skills, security training development, and liaison with vendors to safeguard the hospital’s information systems and patient data.

Qualifications

• Design and implement IT security programs and policies.
• Collaborate with Privacy, Compliance, and Audit teams.
• Lead security awareness training and incident response activities.
• Act as HIPAA Security Officer and ensure HIPAA compliance.

Responsibilities

• Establish and maintain relationships with Privacy, compliance, internal audit, and external audit teams.
• Chair hospital-wide security committee and participate in Board-level audit/compliance committees.
• Lead IT incident investigations and breach reporting.
• Develop a comprehensive security program addressing assessment, prevention, detection, and response.

Skills

HIPAA Security Officer

IT security

Risk assessment

Security program development

Policy development

Security awareness training

Incident investigation

Vendor liaison

Security audits

Access control

Education

Bachelor's degree in related discipline

Master's degree preferred

Tools

eDiscovery tools

Job description

As Mount Sinai grows, so does our legacy in high-quality health care.Since 1949, Mount Sinai Medical Center has remained committed to providing access to its diverse community. In delivering an unmatched level of clinical expertise, our medical center is committed to recruiting and training top healthcare workers from across the country. We offer the latest in advanced medicine, technology, and comfort in 12 facilities across Miami-Dade (including our 674-bed main campus facility) and Monroe Counties, with 38 medical services, including cancer care, 24/7 emergency care, orthopedics, cardiovascular care, and more. Mount Sinai takes pride in being South Florida's largest private independent not-for-profit hospital, dedicated to continuing the training of the next generation of medical pioneers.Culture of Caring: The Sinai WayOur hardworking, tight-knit community of more than 4,000 dedicated employees fosters an environment of care and compassion. Each member plays a vital role in our collective mission to deliver excellent healthcare through innovation, education, and research. At Mount Sinai, we take pride in our achievements, aiming to be a beacon of quality healthcare in South Florida. We welcome all healthcare professionals to join our thriving community and contribute to our pursuit for clinical excellence.Department:CC019350 Information TechnologyJob Description Summary:Position Responsibilities:Establish and maintain close working relationship with Privacy officer, compliance officer, internal audit, external audit, and other related constituencies.Serve as chair of hospital-wide security committee and participate in Board-level audit and compliance committees as required Serve as HIPAA Security Officer and ensure all aspects of HIPAA compliance are maintained.Develop and maintain an IT Security Program that addresses the needs for assessment, prevention, detection, and response to security mattersEstablish a policy program and ensure all IT and Security policies are up-to-date, accurate, and communicated/trained throughout the organization ImplementRisk Assessment and Management policies Perform regular and complete risk and vulnerability scans, and provide detailed action plans to remediate risksDevelop and publish a Security Scorecard that measures the security risks and associated KPIs Implement policies and procedures related to user access, including role-based access profiles, user provisioning/de-provisioning processes, SSO, and regular user access audits.Lead IT incident investigations, working with internal and external groups, including forensics, eDiscovery, etcLead breach reporting and remediation plans when necessaryEstablish security standards as it relates to network, server, workstations, end user devices, OS, etc. and ensure contracts include standard language for all new systems to define security configurationsManage and perform assessments for all new system implementations prior to go-liveDevelop a comprehensive security awareness training program, including materials, new hire orientation presentation, Leadership materials, Board briefings, and housing content on a security awareness intranet siteServe as point of contact for vendors and service providers regarding IT Security mattersOther duties as assignedQualificationsLicense/Registration/CertificationRelevant certifications such as CISSP desired EducationBachelor's Degree in related discipline, Master's Degree preferred.Experience8 years of IT Security experience desiredBenefits:We believe in the physical and mental well-being of our employees and are committed to offering comprehensive benefits that fit their personal needs:Health benefitsLife insuranceLong-term disability coverageHealthcare spending accountsRetirement planPaid time offPet InsuranceTuition reimbursementEmployee assistance programWellness programOn-site housing for select positions and more!Degree Requirements:Certification: