Deputy CISO & Cybersecurity Architect - Strategic Leader

luriechildrens; Chicago (IL); On-site; USD 181,000 - 299,000; Full time

Job summary

Lurie Children's seeks a Deputy CISO / Cybersecurity Architect to lead the hospital's cybersecurity transformation and enterprise security architecture. You will own the target-state design, multi-year roadmap, and prioritize the security program, reporting to the CISO on strategy and architecture.

You will partner with IT, Digital, Clinical, and Infrastructure leadership to embed security, drive risk-based decisions, and ensure regulatory alignment.

Qualifications

• Extensive experience in cybersecurity leadership, security architecture, or security transformation roles.
• Deep knowledge of enterprise security architecture, cloud security, identity and access management, detection and response, and network/endpoint security.
• Proven ability to lead large-scale, multi-year security modernization programs.
• Strong executive communication and stakeholder management skills, including board and senior leadership engagement.
• Demonstrated ability to translate business and clinical needs into practical, risk-based security strategies.
• Experience operating in healthcare or highly regulated environments preferred.
• Knowledge of relevant frameworks and regulations, including NIST, HIPAA, and PCI.
• Ability to build and lead high-performing technical and architectural teams.
• Strategic, systems-level thinking combined with hands-on technical credibility.
• Relevant certifications (e.g., CISSP, CISM, CCSP) preferred.

Responsibilities

• Lead development and governance of the enterprise cybersecurity target-state architecture and transformation roadmap.
• Establish and mature a scalable, internally owned security operating model and delivery capability.
• Serve as the technical lead to senior risk leaders, providing the technical guidance and risk-modeling required for executive decision-making.
• Define and enforce security architecture standards across cloud, on-prem, identity, network, endpoint, application, and data environments.
• Drive the technical execution of security initiatives ensuring they are architecturally sound and sustainable.
• Partner with IT, Digital, Clinical, and Infrastructure leadership to embed security into technology delivery and operations.
• Serve as executive decision authority for security architecture, risk tradeoffs, and technical strategy.
• Support executive and board-level communications on security strategy, risk posture, and transformation progress.
• Ensure alignment with healthcare regulatory and compliance frameworks (e.g., HIPAA, NIST, PCI).
• Build and mature internal security architecture and engineering capabilities, including roles, skills, and operating processes.
• Establish metrics and reporting for overall cyber program, security maturity, risk identification, risk reduction, and program performance.

Skills

Cybersecurity leadership

Security architecture

Regulatory compliance

Executive communication

Tools

Cloud security

Identity & access management

Network security

Detection & response

Job description

Lurie Children's seeks a Deputy CISO / Cybersecurity Architect to lead the hospital's cybersecurity transformation and enterprise security architecture. You will own the target-state design, multi-year roadmap, and prioritize the security program, reporting to the CISO on strategy and architecture.

You will partner with IT, Digital, Clinical, and Infrastructure leadership to embed security, drive risk-based decisions, and ensure regulatory alignment.