Cybersecurity Program Director

North LA County Regional Center (NLACRC); California (MO); On-site; USD 133,000 - 168,000; Full time

Job summary

North LA County Regional Center (NLACRC) seeks an experienced Cybersecurity Manager to lead the organization’s enterprise information security program, aligning governance, risk, and compliance with HIPAA, HITRUST, and ISO 27001 standards. You will partner with IT leadership to mature security across endpoints, cloud, and data governance.

The role requires strong executive communication, strategic risk management, and hands-on leadership to drive security initiatives and incident response across

Qualifications

• Bachelor’s degree in IT, Computer Science, or related field
• 7+ years in cybersecurity, risk, or information security (healthcare preferred)
• 4+ years of leadership experience managing teams and programs
• 5+ years of hands-on HIPAA compliance experience

Responsibilities

• Lead enterprise cybersecurity strategy and program leadership
• Develop a multi-year cybersecurity roadmap with measurable outcomes
• Report posture, risks, and maturity to executive leadership
• Establish KPIs/KRIs to track program effectiveness
• Own and maintain ISMS aligned with ISO 27001
• Lead ISO 27001 certification readiness, audits, and improvement
• Oversee HITRUST and HIPAA compliance, audits, and controls
• Coordinate remediation across business and IT teams
• Lead external audits, penetration testing, and regulatory reviews
• Act as primary liaison for auditors, regulators, and stakeholders
• Mentor and develop cybersecurity team members
• Support budgeting, vendor selection, and strategic investments

Skills

Executive communication

Strategic thinking

Regulatory environments

Leadership

Translate risk to business impact

Education

Bachelor's degree in IT/CS

Tools

CISSP

CISM

CRISC

HCISPP

Job description

North LA County Regional Center (NLACRC) seeks an experienced Cybersecurity Manager to lead the organization’s enterprise information security program, aligning governance, risk, and compliance with HIPAA, HITRUST, and ISO 27001 standards. You will partner with IT leadership to mature security across endpoints, cloud, and data governance.

The role requires strong executive communication, strategic risk management, and hands-on leadership to drive security initiatives and incident response across