Director, Cybersecurity – Engineering, Operations and Incident Response

University of Wisconsin Hospitals and Clinics Authority in; Madison (WI); Hybrid; USD 150,000 - 190,000; Full time

Job summary

University of Wisconsin Hospitals and Clinics Authority seeks a Director of Cybersecurity – Engineering, Operations and Incident Response (Finance) to lead a cybersecurity team spanning evaluation, design, deployment and ongoing support of security solutions across UW Health. You will act as a technical leader, set direction, and ensure alignment with business goals within a hybrid work model.

The role emphasizes incident response leadership, governance, risk management and collaboration with

Qualifications

• Bachelor's degree required in healthcare, CS, IS, engineering, business, healthcare administration or related field.
• Master's degree preferred in IS security, business administration or healthcare administration.
• Demonstrated success across systems development or operational life cycle.
• Experience in IT security operations, training, audit management, and identity access management.
• Experience leading incident response activities.

Responsibilities

• Lead a team in evaluation, design, architecture, deployment and support of security solutions.
• Provide technical direction and evangelize best practices.
• Develop technologies and strategies aligned with security frameworks.
• Stay current on security trends, incident response, and IT environment impact.
• Protect assets with monitoring controls and ongoing evaluation.
• Collaborate with infrastructure teams, vendors, and leadership.
• Align security strategy with business goals.

Skills

Leadership

IT Security Operations

Incident Response

Cloud Security

Governance, Risk & Compliance

Security Architecture

Education

Bachelor's degree in a related field

Master's degree in IS Security / Healthcare Admin

Tools

Firewalls

IPS

WAFs

SIEM

Endpoint protection

Job description

University of Wisconsin Hospitals and Clinics Authority

Director, Cybersecurity – Engineering, Operations and Incident Response (Finance)

Be part of something remarkable

Join the #1 hospital in Wisconsin!

We are seeking a Director, CyberSecurity – Engineering, Operations and Incident Response to:

• Lead a talented team of cybersecurity professionals in the areas of evaluation, design architecture, deployment, and support of traditional, as well as leading-edge information security solutions.
• Act as a technical leader and point of escalation to provide technical direction to team members and evangelize best practices and methodologies.
• Develop technologies and strategies that align with established information security frameworks.
• Stay current on applicable security industry trends both offensive and defensive including applicable technology strategies, incident response, and potential impact to UWHealth's IT environment.
• Protect company assets with new security strategies, monitoring controls, and ongoing evaluation.
• Cultivate strong working relationships with other infrastructure teams, engineers, architects, vendors, contractors, and leadership.
• Understand business needs and processes for area of responsibility. Align technical information security strategy with overall business goals.

At UW Health, you will have

• An excellent benefits package, including health and dental insurance, paid time off, retirement plans, two-week paid parental leave and adoption assistance.
• Options for a variety of schedules and shifts that offer flexibility and allow for work-life balance
• Access to great resources through the UW Health Employee Wellbeing Department that supports your emotional, financial, and physical well-being
• Tuition benefits eligibility - UW Health invests in your professional growth by helping pay for coursework associated with career advancement
• The opportunity to earn a referral bonus for referring friends, former colleagues or others to apply for open, posted positions

Qualifications

• Bachelor's Degree in Healthcare, Computer Science, Information Systems, Engineering, Business, Healthcare Administration or related field Required
• Master's Degree in IS Security, Business Administration, or Healthcare Administration Preferred

Work Experience

• Demonstrated success working across the systems development or operational life cycle. Required
• Demonstrated success operational levels within Information Security programs, including IT Security Strategy, IT Security Operations, Security Training and Awareness, IT General Controls Compliance & Audit Management, Cyber security programs, and Identity and Access Management. Required
• Demonstrated success managing security infrastructure - e.g., firewalls, intrusion prevention systems (IPSs), web application firewalls (WAFs), endpoint protection, SIEM and log management technology. Required
• Demonstrated success designing and securing applications and infrastructures in cloud environments. Required
• Demonstrated success leading Governance, Risk and Compliance initiatives. Required
• Demonstrated success leading incident response activities. Required
• 10+ years extensive project and leadership experience resulting in greater levels of responsibility and leadership based upon proven success. Preferred
• Previous work experience with federal and state privacy and security laws, regulations, and accreditation standards for maintaining information security and confidentiality Preferred
• 7 years direct patient care delivery and operational management experience Preferred
• Proven experience in collaboration and development of successful partnerships between IT and operations. Preferred
• Significant prior experience leading IT Systems support staff. Preferred
• Experience supporting systems and/or operations in a 24x7 hospital setting. Preferred

Licenses & Certifications

• Certified Information System Security Professional (CISSP), Certified Information Systems Manager (CISM), or Certified Information Systems Auditor (CISA) Upon Hire Required
• CPHIMS, PMP, ITIL Preferred
• Various Vendor Certifications as relevant for the position, such as Certified Cloud Security Professional (CCSP), Healthcare Information Security and Privacy Professional (HCISPP), Certified in Risk and Information Systems Controls (CRISC) Preferred

Our Commitment to Social Impact and Belonging

UW Health is committed to fostering a workplace that creates belonging for everyone and is an Equal Employment Opportunity (EEO) employer. Our respect for people shines through patient care interactions and our daily work practices as we work to embrace the knowledge, unique perspectives and qualities each employee and faculty member brings to work each day. It is the policy of UW Health to provide equal opportunities to all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information.

Job Description

UW Hospital and Clinics Benefits

Work Schedule: This is a full-time, 40 hours per week position scheduled to work Monday through Friday, with core hours between the hours of 8:00 AM - 5:00 PM. Applicants hired into this position can work hybrid from WI or IL. This will be discussed during the interview process.