Director, Cyber Risk & Information Protection

HCA Healthcare; Nashville (TN); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401K matched

Tuition assistance

Employee discounts

ESPP

Job summary

HCA Healthcare is seeking a Director of Information Protection & Security (IPS) Risk Management in Nashville to lead the organization’s cybersecurity risk program. The role emphasizes developing and overseeing risk strategies, communicating risk across all levels, and driving risk reduction through strong governance and metrics.

The ideal candidate will have 7+ years in IT/security/privacy, leadership experience, and relevant certifications (CISSP/CISA/CRISC preferred), with a Bachelor’s and

Qualifications

• Bachelor’s degree is required.
• Master’s degree is preferred.
• 3+ years of leadership experience.
• 7+ years of experience in information technology, information security, privacy, and/or healthcare.
• CISSP, CISA or CRISC certifications preferred.

Responsibilities

• Lead the IPS risk management program and strategy.
• Communicate cyber risks clearly to stakeholders at all levels.
• Develop and manage the risk register and remediation plans.
• Collaborate with Internal Audit, Legal, and IT to ensure governance of the program.
• Ensure alignment with HIPAA, PCI, NIST and other standards.

Skills

Leadership experience

IT & InfoSec experience

Education

Bachelor’s degree

Master’s degree

Tools

CISSP

CISA

CRISC

Job description

HCA Healthcare is seeking a Director of Information Protection & Security (IPS) Risk Management in Nashville to lead the organization’s cybersecurity risk program. The role emphasizes developing and overseeing risk strategies, communicating risk across all levels, and driving risk reduction through strong governance and metrics.

The ideal candidate will have 7+ years in IT/security/privacy, leadership experience, and relevant certifications (CISSP/CISA/CRISC preferred), with a Bachelor’s and