Chief Information Security Officer

Luminous Technology Group; Ventura (CA); Hybrid; USD 180,000 - 280,000; Full time

Job summary

Luminous Technology Group seeks an experienced Chief Information Security Officer (CISO) for a hybrid, contract consulting engagement in Southern California. This executive role requires hands-on leadership and deep cybersecurity expertise to shape enterprise security strategy and risk programs.

The successful candidate will drive HIPAA alignment, risk oversight, and cross‑functional collaboration with executive leadership, privacy, compliance, and clinical IT teams.

Qualifications

• Bachelor's degree in cybersecurity, IT, CS, healthcare administration, business, or related field.
• Minimum 10 years of progressive IT, cybersecurity, or technology risk management experience.
• At least 5 years leading cybersecurity teams, programs, or enterprise security initiatives.
• Strong operational knowledge of security monitoring, incident response, identity and access management, security architecture, and risk management.
• Experience coordinating complex technology projects, regulatory remediation, and cross‑functional initiatives.
• Exceptional executive communication, stakeholder management, and collaborative leadership skills.

Responsibilities

• Develop and execute a multiyear cybersecurity strategy and roadmap.
• Oversee security operations, threat monitoring, incident response, vulnerability management, and ransomware preparedness.
• Direct security initiatives involving infrastructure, cloud services, identity management, clinical systems, medical devices, and emerging technologies.
• Establish cybersecurity metrics, performance dashboards, and executive reporting.
• Lead technology risk assessments, security control evaluations, and regulatory compliance initiatives.
• Coordinate cybersecurity audits, regulatory responses, investigations, and remediation of findings.
• Build relationships with executive leadership, Compliance, Privacy, clinical operations, and IT teams.
• Translate complex technical risks into clear recommendations and priorities.
• Balance patient safety, regulatory compliance, operational continuity, and cybersecurity objectives.

Skills

Executive leadership

Stakeholder management

Cybersecurity strategy

Risk management

Regulatory compliance

Executive communication

Education

Bachelor's degree in cybersecurity / IT / CS / healthcare administration / business

10+ years IT/cybersecurity/technology risk management

CISSP / CISM / CISA or equivalent

HCISPP or healthcare security certification

Job description

Chief Information Security Officer (CISO) — Contract

Location: Ventura County Area, California
Work Arrangement: Hybrid — approximately 3 days onsite per week
Position Type: Contract Consulting Engagement
Industry: Healthcare

Position Overview

We are recruiting an experienced Chief Information Security Officer (CISO) for a consulting engagement with a major Southern California healthcare organization.

We are seeking a cybersecurity executive who combines strong operational security expertise with strategic leadership, sound judgment, and exceptional relationship management skills.

The successful candidate will lead enterprise cybersecurity programs, oversee IT risk and regulatory compliance, and work collaboratively with executives, clinical leadership, compliance professionals, and technology teams.

This is a hands-on leadership opportunity requiring both technical depth and the ability to translate cybersecurity priorities into practical business and clinical outcomes.

Key Responsibilities

Cybersecurity Leadership and Operations

Develop and execute a multiyear cybersecurity strategy and improvement roadmap.

Oversee security operations, threat monitoring, incident response, vulnerability management, and ransomware preparedness.

Direct security initiatives involving infrastructure, cloud services, identity management, clinical systems, medical devices, and emerging technologies.

Establish cybersecurity metrics, performance dashboards, and executive reporting.

Enterprise Risk and Compliance

Lead technology risk assessments, security control evaluations, and regulatory compliance initiatives.

Oversee HIPAA security requirements and coordinate remediation of technology-related compliance findings.

Maintain enterprise technology risk registers, corrective-action plans, and documented remediation processes.

Coordinate cybersecurity audits, regulatory responses, investigations, and evidence-based closure of findings.

Executive and Cross‑Functional Collaboration

Build effective relationships with executive leadership, Compliance, Privacy, clinical operations, and IT teams.

Translate complex technical risks into clear recommendations and actionable priorities.

Coordinate cybersecurity and risk remediation across multiple technical and operational stakeholders.

Lead security personnel and external service providers, establish priorities, and oversee program delivery.

Balance patient safety, regulatory compliance, operational continuity, and cybersecurity objectives.

Required Qualifications

Bachelor's degree in cybersecurity, information technology, computer science, healthcare administration, business, or a related field.

Minimum 10 years of progressive IT, cybersecurity, or technology risk management experience.

At least 5 years leading cybersecurity teams, programs, or enterprise security initiatives.

Demonstrated experience building or improving enterprise cybersecurity programs.

Strong operational knowledge of security monitoring, incident response, identity and access management, security architecture, and risk management.

Experience coordinating complex technology projects, regulatory remediation, and cross‑functional initiatives.

Exceptional executive communication, stakeholder management, and collaborative leadership skills.

Preferred Qualifications

Cybersecurity leadership experience within healthcare organizations.

Knowledge of HIPAA Security requirements, NIST Cybersecurity Framework, clinical technologies, and electronic health record environments.

Public-sector or similarly complex enterprise experience.

CISSP, CISM, CISA, CRISC, HCISPP, or comparable professional certification.

Advanced degree in a relevant discipline.

This contract position requires regular interaction with executive leadership, technology teams, and operational stakeholders.

Candidates should be available for approximately three onsite days per week, with potential flexibility once established in the engagement.

This is not a contract-to-hire arrangement. A future permanent opportunity may become available through a separate competitive recruitment process, but no permanent position is guaranteed.

Additional Information

All your information will be kept confidential according to EEO guidelines.

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply