Chief Information Security-Tech Officer

Renown-Health; Reno (NV); On-site; USD 180,000 - 280,000; Full time

Job summary

Renown Health in Reno, Nevada seeks a Chief Information Security & Technology Officer (CISO) to lead security strategy, risk management, and enterprise IT defense. The role reports to the CIO with a dotted line to the Chief Compliance Officer and collaborates with executives to protect information assets and ensure regulatory compliance.

You will direct security programs, audits, disaster recovery, vendor management, and incident response, while aligning security initiatives with business goals

Qualifications

• Expertise in technical and business environment and familiarity with national security standards.
• Experience with business continuity, disaster recovery, auditing, risk management, vulnerability assessments, and cyber-security.
• Extensive knowledge of information security technologies including firewall, intrusion detection, encryption, and identity management.
• Ability to communicate technical issues to non-technical employees.

Responsibilities

• Provide executive leadership and vision for security strategies.
• Lead strategic security planning and prioritize defense initiatives.
• Develop and communicate security plans to executives, staff and stakeholders.
• Oversee disaster recovery and business continuity plans and audits.
• Manage information security policies and standards company-wide.
• Coordinate vendor management and contractual negotiations.
• Monitor security operations and incident response.

Skills

Information security leadership

Risk management

Vulnerability assessments

Contract/vendor negotiations

Cyber-security and incident management

Firewall

Identity and access management

Disaster recovery planning

Auditing

Job description

Reporting to the Chief Information Officer (CIO), the Chief Information Security & Technology Officer (CISO) with a dotted line to Chief Compliance Officer provides vision and leadership for developing and supporting security initiatives. The CISO directs the planning and implementation of enterprise IT system, business operation, and facility defenses against security breaches and vulnerability issues. This individual is also responsible for auditing existing systems, while directing the administration of security policies, activities, and standards. The incumbent establishes and maintains a comprehensive company wide information security program to ensure that information assets are adequately protected against current, future, internal and external threats. The position is responsible for identifying, directing, coordinating, evaluating, and reporting on information security risks in a manner that meets compliance and regulatory requirements while enabling the company to develop an anticipatory response to minimize information security risk. The Chief Information Security Officer position acts as the key liaison and focal point in the company for all information security communications and projects. The CISO manages the relationship between Renown and all managed services partners.This role will also have oversight of the information technology technical infrastructure planning and management.

Nature and Scope:

• Provides executive leadership, vision and managerial oversight in the development and implementation of security strategies to define policies and processes that enable consistent, effective information security practices and minimize risk. Determines projects and priorities for all information security issues. Establishes short and long-range business plans to achieve the necessary security to protect organization assets.
• Leads strategic security planning to achieve business goals by prioritizing defense initiatives and coordinating the evaluation, deployment, and management of current and future security technologies using a risk-based assessment methodology.
• Develops and communicates security strategies and plans to executive team, staff, partners, customers, and stakeholders.
• Assists with the design and implementation of disaster recovery and business continuity plans, procedures, audits, and enhancements.
• Develop, implement, maintain, and oversee enforcement of policies, procedures, and associated plans for system security administration and user system access based on industry standard best practices.
• Establishes a security program for Renown Health incorporating regulatory standards and methodologies and provides reporting to ensure that standards are followed.
• Oversees daily security activities to manage risk at an appropriate level, ensure effective response to incidents, and optimize secure data access and utilization.
• Directs the communication and dissemination of organization information security standards and advises senior executives regarding internal or external data security potential threats. Acts as advocate and primary liaison for the company's security vision via regular written and in-person communications with the company's executives, department heads, and end users.
• Manages information security team to proactively analyze and directly respond to internal and external threats to system stability including unauthorized access such as vulnerability assessments, record attempts; minimizes/mitigates risk to information and systems.
• Deploys integrated risk management approach to create executive level perspectives and status reports regarding all security risks we may encounter including risks in physical security, access and control issues, data security and contingency planning.
• Establishes and enforces a process to ensure that all users receive appropriate information security training to perform duties along with periodic information security awareness training; insures appropriate levels of information security awareness and personal responsibility.
• Provides leadership, direction, and oversight to the security team. Manage the human resources activities of Information Security in accordance with established policies and procedures.
• Develops, tracks, and controls the security services annual operating and capital budgets for purchasing, staffing, and operations.In conjunction with Renown's vendor relationships, this position will also focus on the information technology infrastructure needs of the entire Renown Health System.

Oversight of:

• Backups and Recovery
• Data Center and Data Center Operations
• Help Desk
• Networking and Networks (Wired, Wireless)
• Firewalls
• All Servers including all Operating systems.
• All Desktops including PCs, printers, scanners, USB connected devices, multi-Function devices
• All Mobile devices including Laptops
• Some infrastructure applications such as enterprise email
• Interface teams
• Establish standards and technical architectural designs
• Evaluate vendors and technologies.
• Keep current on technical developments.
• Evaluate proposals
• Review, negotiate and manage vendor contracts
• Run and participate in structured system selection processes
• Analyze options, summarize findings, make recommendations
• Ensure compatibility and integration with existing and planned systems and infrastructure
• Monitor and manage vendor performance and compliance with contract terms
• Document, report and elevate vendor performance problems as appropriate

Disaster preparedness and response, Documentation and Accreditations:

• Develop, review, refine policies & procedures
• Ensure adherence with Renown and departmental P&P
• Support auditing and audits, respond to findings, take corrective actions as appropriate
• Ensure development, updating and routine review of Disaster Recovery Plans
• Assist business units with development of Business Continuity & Recovery Plans
• Conduct and support drilling of DRP and BC&RP
• Direct disaster and routine outage recovery response efforts when necessary
• Ensure attainment and maintenance of various accreditations
• Ensure compliance with all software licensing requirements and documentation of such.
• Ensure documentation is complete, comprehensive, and timely; supports continuity in the event of turnover.

Minimum Requirements:

• Expertise in technical and business environment, familiarity with national security standards, experience with business continuity, disaster recovery, auditing, risk management, vulnerability assessments, contract/vendor negotiations, and cyber-security and incident management.
• Extensive knowledge of information security technologies, markets and vendors including firewall, intrusion detection, assessment tools, encryption, certificate authority, web, and application development.
• Experience in and assessment methodologies, procedures and best practices that relate to information networks, systems, and applications
• Experience in application security, database technologies used to store enterprise information, directory services, financial information, and information systems auditing.
• Experience in identity and access management, security program policies, processes, standards, requirements and procedures and various supporting security technologies.
• Ability to apply in-depth critical and analytic thinking skills to unique problems and projects to provide effective assessment and solution generation
• Ability to communicate technical issues to non-technical employees.