Director, Cybersecurity – Engineering, Operations, Incident Response

Jobtailor; Illinois; Hybrid; USD 180,000 - 240,000; Full time

Job summary

UW Health is seeking a senior information security leader to guide a team across evaluation, architecture, deployment, and ongoing support of security solutions. The role provides technical leadership, direction, and best-practice guidance while aligning security programs with business goals and regulatory requirements.

You will monitor industry trends, incident response activities, and security controls to protect hospital IT environments.

Qualifications

• Bachelor’s degree or higher in a related field.
• “CISSP, CISM, or CISA certification required on hire.”
• Experience across systems development or operational life cycle.
• Experience leading IT security programs and governance initiatives.
• Experience managing security infrastructure (firewalls, SIEM, logs).
• Experience securing cloud environments and 24x7 hospital operations.

Responsibilities

• Lead a team of cybersecurity professionals across evaluation, architecture, deployment, and support of security solutions.
• Provide technical leadership, direction, and best-practice guidance.
• Develop strategies aligned with information security frameworks.
• Monitor trends, incident response, and impacts on the IT environment.
• Protect assets through security strategies and controls.
• Build relationships with infrastructure, engineers, vendors, and leadership.
• Align information security with business goals.

Skills

Cybersecurity leadership

Incident response

Security operations

Cloud security

IT governance

Risk & compliance

Team leadership

Vendor relations

Communication skills

Education

Bachelor’s degree

CISSP

CISM

CISA

Master’s degree preferred

Tools

Firewalls

IPS

WAF

Endpoint protection

SIEM

Log management

Job description

• Lead a team of cybersecurity professionals across evaluation, architecture design, deployment, and support of information security solutions
• Provide technical leadership, direction, escalation support, and cybersecurity best-practice guidance
• Develop technologies and strategies aligned with established information security frameworks
• Monitor offensive and defensive security industry trends, technology strategies, incident response, and impacts on UW Health’s IT environment
• Protect company assets through security strategies, monitoring controls, and ongoing evaluation
• Build working relationships with infrastructure teams, engineers, architects, vendors, contractors, and leadership
• Understand business needs and processes and align information security strategy with overall business goals

Requirements

• Bachelor’s Degree in Healthcare, Computer Science, Information Systems, Engineering, Business, Healthcare Administration, or related field required
• CISSP, CISM, or CISA certification required upon hire
• Demonstrated success across the systems development or operational life cycle
• Demonstrated success at operational levels within Information Security programs, including IT Security Strategy, IT Security Operations, Security Training and Awareness, IT General Controls Compliance & Audit Management, cybersecurity programs, and Identity and Access Management
• Demonstrated success managing security infrastructure, including firewalls, IPSs, WAFs, endpoint protection, SIEM, and log management technology
• Demonstrated success designing and securing applications and infrastructures in cloud environments
• Demonstrated success leading Governance, Risk and Compliance initiatives
• Demonstrated success leading incident response activities
• 10+ years of extensive project and leadership experience preferred
• Previous experience with federal and state privacy and security laws, regulations, and accreditation standards preferred
• 7 years of direct patient care delivery and operational management experience preferred
• Experience collaborating to develop successful IT and operations partnerships preferred
• Significant prior experience leading IT Systems support staff preferred
• Experience supporting systems and/or operations in a 24x7 hospital setting preferred
• Master’s Degree in IS Security, Business Administration, or Healthcare Administration preferred
• CPHIMS, PMP, ITIL, CCSP, HCISPP, CRISC, and relevant vendor certifications preferred
• Applicants can work hybrid from Wisconsin or Illinois
• Off-hours availability may be required

Core Competencies

Demonstrates expertise in leading cybersecurity initiatives, aligning information security strategies with business goals, and managing security infrastructure in compliance with industry standards. Proven ability to develop and implement security solutions while fostering collaboration across teams and ensuring adherence to regulatory requirements.