Cyber Risk Program Lead – Healthcare IT Security

Valley Health System; United States; On-site; USD 98,000 - 154,000; Full time

Benefits offered by this job

Zero-Deductible Health Plan

Dental and Vision Insurance

Paid Time Off

Tuition Assistance

Retirement Savings Match

Employee Assistance Program

Job summary

Valley Health System in Winchester Medical Center is seeking a Cyber Risk Program Manager to strengthen the organization’s information security program and ensure RMF alignment across systems.

The role requires on-site presence 2–3 days a week at the Winchester Medical Center campus and involves monitoring security posture, leading vulnerability management, and coordinating IT audits for HIPAA, NIST, and ISO controls.

Qualifications

• Bachelor’s or postgraduate degree in Business, Computer Science, Information Security or related field is required.
• 7+ years of IT experience is required.
• 5+ years in cybersecurity or risk management/IT audit with regulatory compliance familiarity the role.
• Industry advanced level cybersecurity certification required within 1 year of hire.

Responsibilities

• Monitors the security posture of systems and provides risk-based recommendations.
• Leads vulnerability management across applications, OS, networks, and cloud.
• Collaborates with internal teams to remediate vulnerabilities and protect assets/data.
• Oversees IT audit processes to demonstrate HIPAA, NIST, ISO, COBIT, and RMF compliance.
• Backs up the Information Security Manager and participates in escalations.

Skills

Stakeholder communication

Risk assessment

Cybersecurity

Regulatory awareness

Education

Bachelor’s or higher in Business, CS, Info Security

Tools

GRC tools

Policy management

Job description

Valley Health System in Winchester Medical Center is seeking a Cyber Risk Program Manager to strengthen the organization’s information security program and ensure RMF alignment across systems.

The role requires on-site presence 2–3 days a week at the Winchester Medical Center campus and involves monitoring security posture, leading vulnerability management, and coordinating IT audits for HIPAA, NIST, and ISO controls.