Director Chief Information Security Officer - IT Infrastructure and Operations

St. Peter's Health; Montana; On-site; USD 140,000 - 180,000; Full time

Job summary

St. Peter's Health in Montana is seeking a Chief Information Security Officer (CISO) to lead the organization's cybersecurity and information protection programs. The CISO will ensure the security of protected health information and critical systems while supporting the secure delivery of healthcare services.

The ideal candidate will have a minimum of 2 years in Information Security and a deep understanding of clinical workflows and EHR systems, alongside relevant certifications such as CISM and CISSP.

Qualifications

• Minimum 2 years in Information Security with at least 2 years in a senior leadership/executive role.
• Deep expertise in the healthcare industry and strong understanding of clinical workflows and EHR systems.

Responsibilities

• Provide strategic leadership for cybersecurity and information protection programs.
• Lead enterprise risk management, regulatory compliance, and security operations.
• Align security initiatives with organizational goals and patient safety.

Skills

Expertise with enterprise-grade security architecture

Cybersecurity Technologies

Risk Management

Education

Bachelor’s degree in Computer Science, Information Security, or related field

Master’s degree

Tools

IAM

AWS

Azure

GCP

advanced threat detection tools

Job description

Job Description

The Chief Information Security Officer (CISO) provides strategic leadership for the organization's cybersecurity and information protection programs, ensuring the security of protected health information (PHI), critical systems, and sensitive data. The CISO leads enterprise risk management, regulatory compliance, security operations, incident response, and business continuity efforts while aligning security initiatives with organizational goals, patient safety, and care continuity. Through collaboration, governance, and security awareness, the CISO helps safeguard the organization against evolving threats and supports the secure delivery of healthcare services.

Knowledge / Experience

• Minimum 2 years of progressive experience in Information Security, with at least 2 years in a senior leadership/executive role (CISO or equivalent) preferred.
• Deep and demonstrated expertise in the healthcare industry, with a strong understanding of clinical workflows, EHR systems, and the protection of PHI preferred.

Certifications (Preferred)

• Certified Information Security Manager (CISM)
• Certified Information Systems Security Professional (CISSP)
• Certified Chief Information Security Officer (CCISO)
• HITRUST CSF Practitioner (CCSFP)

Required Skills and Competencies

• Cybersecurity Technologies: Expertise with enterprise-grade security architecture, including IAM, cloud security (AWS/Azure/GCP), network segmentation, and advanced threat detection tools.
• Risk Management: Proven track record of conducting and managing enterprise risk assessments and developing effective mitigation strategies.

Education

Bachelor’s degree in Computer Science, Information Security, or a related field. Master’s degree preferred.