Deputy CISO and Cybersecurity Architect

Ann & Robert H. Lurie Children's Hospital of Chicago; Chicago (IL); On-site; USD 181,000 - 299,000; Full time

Benefits offered by this job

Medical, dental and vision insurance

PTO and holidays

Retirement plan with employer match

Job summary

Ann & Robert H. Lurie Children’s Hospital of Chicago is seeking a Deputy Chief Information Security Officer / Cybersecurity Architect to lead the hospital’s security transformation and enterprise security design.

You will own the target-state architecture, multi-year roadmap, and risk-based security strategy aligning with clinical operations and regulatory requirements. You will partner with IT, Digital, Clinical, and Infrastructure leaders to embed security into technology delivery, define

Qualifications

• Extensive experience in cybersecurity leadership or security transformation.
• Deep knowledge of enterprise security architecture, cloud security, IAM, detection/response.
• Proven ability to lead large-scale, multi-year security programs.
• Strong executive communication with board and senior leaders.

Responsibilities

• Lead development and governance of the enterprise cybersecurity target-state architecture and roadmap.
• Establish a scalable, internally owned security operating model.
• Serve as technical lead for risk modeling and executive decision-making.
• Ensure security architecture standards across cloud, on-prem, identity, network, and data.

Skills

Security leadership

Security architecture

Risk modeling

Executive communication

Healthcare security knowledge

Tools

Cloud security tools

Identity & access management

NIST/HIPAA knowledge

Job description

Ann & Robert H. Lurie Children’s Hospital of Chicago provides superior pediatric care in a setting that offers the latest benefits and innovations in medical technology, research and family-friendly design. As the largest pediatric provider in the region with a 140-year legacy of excellence, kids and their families are at the center of all we do. Ann & Robert H. Lurie Children’s Hospital of Chicago is ranked in all 10 specialties by the U.S. News & World Report.

Location

680 Lake Shore Drive

Job Description

General Summary: The Deputy CISO / Cybersecurity Architect provides executive leadership for the hospital’s cybersecurity transformation and enterprise security architecture. This role owns the target-state security design, multi-year roadmap, and prioritization, and leads the development of a scalable, sustainable, and internally owned security program. The position serves as the CISO’s principal deputy for security strategy and architecture, ensuring security capabilities align with clinical operations, digital initiatives, and regulatory requirements.

Essential Job Functions

• Lead development and governance of the enterprise cybersecurity target-state architecture and transformation roadmap.
• Establish and mature a scalable, internally owned security operating model and delivery capability.
• Serve as the technical lead to senior risk leaders, providing the technical guidance and risk-modeling required for executive decision-making.
• Define and enforce security architecture standards across cloud, on-prem, identity, network, endpoint, application, and data environments.
• Drive the technical execution of security initiatives ensuring they are architecturally sound and sustainable.
• Partner with IT, Digital, Clinical, and Infrastructure leadership to embed security into technology delivery and operations.
• Serve as executive decision authority for security architecture, risk tradeoffs, and technical strategy.
• Support executive and board-level communications on security strategy, risk posture, and transformation progress.
• Ensure alignment with healthcare regulatory and compliance frameworks (e.g., HIPAA, NIST, PCI).
• Build and mature internal security architecture and engineering capabilities, including roles, skills, and operating processes.
• Establish metrics and reporting for overall cyber program, security maturity, risk identification, risk reduction, and program performance.

Knowledge, Skills And Abilities

• Extensive experience in cybersecurity leadership, security architecture, or security transformation roles.
• Deep knowledge of enterprise security architecture, cloud security, identity and access management, detection and response, and network/endpoint security.
• Proven ability to lead large-scale, multi-year security modernization programs.
• Strong executive communication and stakeholder management skills, including board and senior leadership engagement.
• Demonstrated ability to translate business and clinical needs into practical, risk-based security strategies.
• Experience operating in healthcare or highly regulated environments preferred.
• Knowledge of relevant frameworks and regulations, including NIST, HIPAA, and PCI.
• Ability to build and lead high-performing technical and architectural teams.
• Strategic, systems-level thinking combined with hands-on technical credibility.
• Relevant certifications (e.g., CISSP, CISM, CCSP) preferred.

Education

Pay Range

$180,960.00-$298,584.00 Salary

At Lurie Children’s, we are committed to competitive and fair compensation aligned with market rates and internal equity, reflecting individual contributions, experience, and expertise. The pay range for this job indicates minimum and maximum targets for the position. Ranges are regularly reviewed to stay aligned with market conditions. In addition to base salary, Lurie Children’s offer a comprehensive rewards package that may include differentials for some hourly employees, leadership incentives for select roles, health and retirement benefits, and wellbeing programs. For more details on other compensation, consult your recruiter or click the following link to learn more about our benefits.

Benefit Statement

Benefits

• Medical, dental and vision insurance
• Employer paid group term life and disability
• Employer contribution toward Health Savings Account
• Flexible Spending Accounts
• Paid Time Off (PTO), Paid Holidays and Paid Parental Leave
• 403(b) with a 5% employer match

Various Voluntary Benefits

• Supplemental Life, AD&D and Disability
• Critical Illness, Accident and Hospital Indemnity coverage
• Tuition assistance
• Student loan servicing and support
• Adoption benefits
• Backup Childcare and Eldercare
• Employee Assistance Program, and other specialized behavioral health services and resources for employees and family members
• Discount on services at Lurie Children’s facilities
• Discount purchasing program

There’s a Place for You with Us

At Ann & Robert H. Lurie Children’s Hospital of Chicago and its affiliates (collectively “Lurie Children’s”), we embrace and celebrate diversity and equity in a serious way. We are committed to building a team with a variety of backgrounds, skills, and viewpoints — recognizing that diverse identities strengthen our workplace and the care we can provide to the Chicago community and beyond. We treat everyone fairly, appreciate differences, and make meaningful connections that foster belonging and allyship. This is a place where you can be your best, so we can give our best to the patients and families who trust us with their care.

Lurie Children’s and its affiliates are equal employment opportunity employers. We value diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity or expression, religion, national origin, ancestry, age, disability, marital status, pregnancy, protected veteran status, order of protection status, protected genetic information, or any other characteristic protected by law.

For questions about how to request an accommodation please contact: [e-mail]

AI Notice

Lurie Children’s utilizes certain AI-enabled features within our recruiting platform to support candidate engagement and assist recruiters in identifying and prioritizing applicants whose experience aligns with job requirements. All employment decisions are made by individuals.

It is a civil rights violation with respect to recruitment, hiring, promotion, or employment for an employer to use artificial intelligence that has the effect of subjecting employees to discrimination on the basis of protected classes under the Illinois Human Rights Act or to use zip codes as a proxy for protected classes.

For questions about the use of artificial intelligence in this process or any additional support, please contact: [e-mail]