Chief Cybersecurity Programs & Deputy BISO

Rush University Medical Center; Chicago (IL); On-site; USD 144,000 - 215,000; Full time

Job summary

Rush University Medical Center in Chicago seeks a senior cybersecurity leader to drive enterprise-wide programs, including awareness, program management, vendor management, and the BISO program. You will align cybersecurity with Rush's strategic goals and foster a security-conscious culture across the health system.

The role requires governance, risk, and leadership expertise, with collaboration across executive leadership, operations, and business stakeholders to advance security initiatives

Qualifications

• Bachelor’s degree in computer science or related field.
• CISM or other applicable certification (e.g., CISSP).
• 12+ years of relevant information security, project management, and cybersecurity education/awareness experience.
• 5+ years of cross-functional team and project management experience.
• 5+ years of vendor management experience.
• Experience in information security GRC, DR, or education/awareness activities.

Responsibilities

• Lead cybersecurity education and awareness programs across Rush employees, students, faculty, and contingent workers.
• Oversee cybersecurity program management, vendor management, and budgeting processes.
• Coordinate a team of BISOs and lead communications with executives and stakeholders.
• Develop metrics to measure engagement, behavior change, and risk reduction.
• Manage contracts, purchasing, and vendor negotiations related to cybersecurity initiatives.
• Collaborate with marketing and communications to disseminate security awareness materials.
• Represent Information Security in system-wide events and external engagements.

Skills

Leadership

Program management

Vendor management

Information security

Governance, risk & compliance

Stakeholder engagement

Communication

Education

Bachelor’s degree in computer science or related field

Job description

Rush University Medical Center in Chicago seeks a senior cybersecurity leader to drive enterprise-wide programs, including awareness, program management, vendor management, and the BISO program. You will align cybersecurity with Rush's strategic goals and foster a security-conscious culture across the health system.

The role requires governance, risk, and leadership expertise, with collaboration across executive leadership, operations, and business stakeholders to advance security initiatives