Director, Cybersecurity - Engineering, Operations and Incident Response

UW Health; Madison (WI); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Paid time off

Retirement plan

Parental leave

Adoption assistance

Job summary

UW Health in Madison, WI is seeking a Director, CyberSecurity - Engineering, Operations and Incident Response to lead a team of cybersecurity professionals across evaluation, design, deployment, and support of security solutions. This full-time role offers hybrid work from WI or IL and a focus on aligning security with business goals.

You will provide technical direction, stay current on trends, manage incident response, and build partnerships with infrastructure, vendors, and leadership.

Qualifications

• Bachelor's Degree in Healthcare, Computer Science, Information Systems, Engineering, Business, Healthcare Administration or related field.
• Master's Degree in IS Security, Business Administration, or Healthcare Administration preferred.
• 10+ years extensive project and leadership experience.
• Experience with IT Security Strategy, IT Security Operations, Security Training and Awareness, IT General Controls Compliance & Audit Management, cyber security programs, and IAM.
• Experience leading incident response activities.
• Experience managing security infrastructure (firewalls, IPS, WAFs, endpoint protection, SIEM).
• Experience designing and securing applications and infrastructures in cloud environments.

Responsibilities

• Lead a team of cybersecurity professionals in evaluation, design architecture, deployment, and support of security solutions.
• Act as a technical leader and point of escalation to provide direction and evangelize best practices.
• Develop technologies and strategies aligned with established information security frameworks.
• Stay current on security industry trends and incident response impacting UW Health's IT environment.
• Protect company assets with new security strategies, monitoring controls, and ongoing evaluation.
• Cultivate strong working relationships with infrastructure teams, engineers, vendors, contractors, and leadership.
• Understand business needs and align security strategy with overall business goals.

Skills

Project leadership

IT security operations

Incident response

Governance, Risk & Compliance

Cloud security

Education

Bachelor's degree

Master's degree preferred

Tools

Firewalls

IPS

WAFs

Endpoint protection

SIEM

Job description

Work Schedule:
This is a full-time, 40 hours per week position scheduled to work Monday through Friday, with core hours between the hours of 8:00 AM - 5:00 PM. Applicants hired into this position can work hybrid from WI or IL. This will be discussed during the interview process.

Be part of something remarkable

Join the #1 hospital in Wisconsin!

We are seeking a Director, CyberSecurity - Engineering, Operations and Incident Response to:

• Lead a talented team of cybersecurity professionals in the areas of evaluation, design architecture, deployment, and support of traditional, as well as leading-edge information security solutions.
• Act as a technical leader and point of escalation to provide technical direction to team members and evangelize best practices and methodologies.
• Develop technologies and strategies that align with established information security frameworks.
• Stay current on applicable security industry trends both offensive and defensive including applicable technology strategies, incident response, and potential impact to UWHealth's IT environment.
• Protect company assets with new security strategies, monitoring controls, and ongoing evaluation.
• Cultivate strong working relationships with other infrastructure teams, engineers, architects, vendors, contractors, and leadership.
• Understand business needs and processes for area of responsibility. Align technical information security strategy with overall business goals.

At UW Health, you will have:

• An excellent benefits package, including health and dental insurance, paid time off, retirement plans, two-week paid parental leave and adoption assistance.
• Options for a variety of schedules and shifts that offer flexibility and allow for work-life balance
• Access to great resources through the UW Health Employee Wellbeing Department that supports your emotional, financial, and physical well-being
• Tuition benefits eligibility - UW Health invests in your professional growth by helping pay for coursework associated with career advancement
• The opportunity to earn a referral bonus for referring friends, former colleagues or others to apply for open, posted positions

Qualifications

• Bachelor's Degree in Healthcare, Computer Science, Information Systems, Engineering, Business, Healthcare Administration or related field Required
• Master's Degree in IS Security, Business Administration, or Healthcare Administration Preferred

Work Experience

• Demonstrated success working across the systems development or operational life cycle. Required
• Demonstrated success operational levels within Information Security programs, including IT Security Strategy, IT Security Operations, Security Training and Awareness, IT General Controls Compliance & Audit Management, Cyber security programs, and Identity and Access Management. Required
• Demonstrated success managing security infrastructure - e.g., firewalls, intrusion prevention systems (IPSs), web application firewalls (WAFs), endpoint protection, SIEM and log management technology. Required
• Demonstrated success designing and securing applications and infrastructures in cloud environments. Required
• Demonstrated success leading Governance, Risk and Compliance initiatives. Required
• Demonstrated success leading incident response activities. Required
• 10+ years extensive project and leadership experience resulting in greater levels of responsibility and leadership based upon proven success. Preferred
• Previous work experience with federal and state privacy and security laws, regulations, and accreditation standards for maintaining information security and confidentiality Preferred
• 7 years direct patient care delivery and operational management experience Preferred
• Proven experience in collaboration and development of successful partnerships between IT and operations. Preferred
• Significant prior experience leading IT Systems support staff. Preferred
• Experience supporting systems and/or operations in a 24x7 hospital setting. Preferred

Licenses & Certifications

• Certified Information System Security Professional (CISSP), Certified Information Systems Manager (CISM), or Certified Information Systems Auditor (CISA) Upon Hire Required
• CPHIMS, PMP, ITIL Preferred
• Various Vendor Certifications as relevant for the position, such as Certified Cloud Security Professional (CCSP), Healthcare Information Security and Privacy Professional (HCISPP), Certified in Risk and Information Systems Controls (CRISC) Preferred

Our Commitment to Social Impact and Belonging

UW Health is committed to fostering a workplace that creates belonging for everyone and is an Equal Employment Opportunity (EEO) employer. Our respect for people shines through patient care interactions and our daily work practices as we work to embrace the knowledge, unique perspectives and qualities each employee and faculty member brings to work each day. It is the policy of UW Health to provide equal opportunities to all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information.

Job Description

UW Hospital and Clinics Benefits