Provides day-to-day leadership and operational oversight for the cybersecurity team within Memorial Health, supporting implementation of cybersecurity strategy and daily execution. This role ensures the confidentiality, integrity, and availability of clinical and business systems while maintaining compliance with HIPAA, HITECH, and other regulatory requirements. This position supports the System Director and Vice President, Infrastructure and Cybersecurity in carrying out cybersecurity priorities, maintaining a strong security posture and ensuring effective execution of policies, procedures, compliance activities, and security operations across the enterprise. The Manager uses a team-based approach to guide staff, coordinate daily work, support issue resolution, and promote a culture of accountability, service, and continuous improvement.
Location: Springfield, IL
Please note this is a hybrid role with onsite requirement in Springfield, IL 3 days per week.
Hours: 8a - 4:30p M- F.
Minimum Qualifications:
Education:
- tBachelor’s degree in computer science, technology, cybersecurity, health information management, or related field is required. Equivalent combination of education and 5+ years of cybersecurity experience may substitute for Bachelor’s. degree.
- tMaster’s degree in related field preferred.
Licensure/Certification/Registry:
- tRelevant professional certification, such as CISSP, Security+, CISM, Azure Security/Microsoft certifications, NIST-related credential preferred.
Experience:
- t3+ years experience in cybersecurity, information security, compliance, or related work in healthcare required.
- tDemonstrated experience leading staff, coordinating daily operations, and supporting program development.
- tStrong understanding of cybersecurity frameworks, technologies, and healthcare regulations.
- tDemonstrated success in project execution and implementation.
- tAbility to work effectively with staff at all levels of the organization, including medical staff and executive leaders.
Other Knowledge/Skills/Abilities:
- tChange Leadership: Ability to energize stakeholders and sustain their commitment to changes in approaches, processes, and strategies.
- tTeam Leadership: Ability to lead groups of people toward shared visions and goals, from forming a team that possesses balanced capabilities, to setting its mission, values and norms, and holding team members accountable individually and as a group for results.
- tInitiative: Ability to identify a problem, obstacle or opportunity and then act to address current or future problems or opportunities.
- tJudgment: Strong decision-making ability and high level of judgment under pressure.
- tCompliance: Ability to drive compliance, operational readiness, and timely issue resolution.
Scope of Supervision:
Directly supervisest5-10tcolleagues; indirectly supervisesttcolleagues
Principal Duties & Responsibilities:
- 1.tProvides day-to-day leadership and coordination of cybersecurity staff, work assignments, and operational priorities.
- 2.tSupports implementation and maintenance of cybersecurity policies, standards, procedures, and controls.
- 3.tAssists in ensuring compliance with HIPAA, HITECH, NIST, ISO, and other applicable laws, regulations, and security standards.
- 4.tCoordinates cybersecurity activities with IS, Legal, HR, Compliance, and other departments to support Memorial Health goals.
- 5.tLeads or support security initiatives, such as threat assessments, vulnerability remediation, risk mitigation, awareness efforts, and cybersecurity assessments.
- 6.tCoordinates security requirements in contracts and due diligence process and partners with procurement and legal to enforce security standards.
- 7.tEscalates significant security issues, risks, and regulatory concerns to leadership, as appropriate.
- 8.tCollaborate with IT architecture teams to embed security into environment. Guide secure configuration standards and hardening practices. Evaluate and implement security technologies aligned to strategic road map.
- 9.tSupports the planning and execution of strategic cybersecurity initiatives and organizational change efforts.
- 10.tOversees daily operations of team members, including scheduling, workload distribution, prioritization, and workflows.
- 11.tLeads team through hiring, onboarding, training, coaching, and developing staff. Conducts regular performance appraisals and discussions and employee development activities.
- 12.tReviews data and metrics to identify trends, support improvement efforts, and strengthen security performance.
- 13.tContributes to the development and maintenance of policies and procedures that improve operational effectiveness.
- 14.tAssists with budget monitoring, resource planning, and operational tracking, as needed.
- 15.tPerforms other duties as assigned.
The intent of this job description is to provide a representative summary of the major duties and responsibilities performed by incumbents of this job. Incumbents may be requested to perform tasks other than those specifically presented in this description.