CISO & VP, Health Information Security & Risk

Prisma Health; Greenville (SC); On-site; USD 150,000 - 230,000; Full time

Job summary

Prisma Health is seeking a senior information security leader to manage the organization's information security program, risk management, and policy framework. This role ensures confidentiality, integrity, and availability of ePHI and PII, while guiding incident response and governance with executive oversight.

Responsibilities include risk assessment, security control design, awareness programs, and coordination with Privacy and Compliance teams to meet federal and state requirements.

Qualifications

• Bachelor's degree in Information Systems or related field.
• Ten (10) years of health industry IT and information security management experience.
• CISSP certification required or equivalent.

Responsibilities

• Builds a strategic and comprehensive information security program with policies and processes.
• Oversees architecture security design review of infrastructure, IAM, networks, and cloud services.
• Promotes information security awareness across the health system.
• Manages security incidents involving ePHI and PII.
• Ensures disaster recovery and business continuity plans are tested.

Skills

Information security

Risk management

Policy development

Incident response

Compliance

Education

Bachelor's degree in Information Systems or related field of study

Tools

CISSP

Job description

Prisma Health is seeking a senior information security leader to manage the organization's information security program, risk management, and policy framework. This role ensures confidentiality, integrity, and availability of ePHI and PII, while guiding incident response and governance with executive oversight.

Responsibilities include risk assessment, security control design, awareness programs, and coordination with Privacy and Compliance teams to meet federal and state requirements.