Director of Cyber Security

UT Medical; Knoxville (TN); On-site; USD 180,000 - 280,000; Full time

Job summary

UT Medical is seeking a Director of Cybersecurity to lead and continuously improve the organization’s cybersecurity program across a complex enterprise, reporting to the CISO. You will drive strategy, governance, and risk management, overseeing SOC operations, threat management, IAM, cloud security, and third‑party risk.

Ideal candidates bring 12+ years in cybersecurity with 7+ years in leadership, strong experience in regulated environments, and certifications such as CISSP or CISM.

Qualifications

• Minimum 12 years of progressive cybersecurity experience.
• Minimum 7 years of progressive leadership experience managing cybersecurity teams, with at least 3 years in a senior leadership position.
• Experience in regulated or mission-critical environments.
• Experience developing cybersecurity strategy, policy, and governance programs.
• Experience developing and managing operating and capital budgets.
• Experience presenting cybersecurity risks and controls to leadership, partners, and other stakeholders.
• Experience working with industry recognized cybersecurity frameworks including NIST, HITRUST, and CIS.
• CISSP or CISM certification.

Responsibilities

• Lead the day-to-day management and execution of the enterprise cybersecurity program.
• Develop, implement, and maintain cybersecurity strategies, roadmaps, policies, standards, and procedures.
• Serve as a strategic advisor to the CISO.
• Provide leadership and oversight of SOC functions.
• Lead threat detection, incident response, and crisis management activities.
• Direct security engineering activities supporting enterprise infrastructure, cloud services, applications, and data platforms.
• Lead enterprise vulnerability management and attack surface reduction initiatives.
• Provide executive oversight of IAM capabilities including MFA, PAM, SSO, and IGA.
• Lead cybersecurity risk assessment, treatment, and reporting activities.
• Support audits, regulatory reviews, and compliance requirements.
• Oversee security governance for cloud platforms and emerging technologies.
• Lead vendor management and third-party cybersecurity risk assessments.
• Lead, mentor, and develop cybersecurity team members.

Skills

Cybersecurity leadership

Budget management

Risk assessment & governance

Industry frameworks (NIST, HITRUST, & 

Certifications: CISSP or CISM

Education

Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, Engineering, or related field

Job description

The Director of Cybersecurity is a senior leadership team member responsible for leading, managing, and continuously improving the organization's cybersecurity program across a complex enterprise environment. Reporting directly to the Chief Information Security Officer (CISO), this role serves as the operational leader of cybersecurity and is responsible for executing the organization's security strategy, reducing cyber risk, protecting critical assets, and ensuring the resilience of business and clinical operations.

The Director of Cybersecurity provides leadership across cybersecurity Operations, Incident Response, Vulnerability Management, Security Engineering, Identity and Access Management (IAM), Governance, Risk and Compliance, Third-Party Risk Management, and Security Training and Awareness.

Key Responsibilities

Cybersecurity Program Leadership

• Lead the day-to-day management and execution of the enterprise cybersecurity program.
• Develop, implement, and maintain cybersecurity strategies, roadmaps, policies, standards, and procedures.
• Serve as a strategic advisor to the CISO.

Security Operations & Threat Management

• Provide leadership and oversight of Security Operations Center (SOC) functions.
• Lead threat detection, incident response, and crisis management activities.

Security Engineering & Infrastructure Protection

• Direct security engineering activities supporting enterprise infrastructure, cloud services, applications, and data platforms.

Vulnerability & Exposure Management

• Lead enterprise vulnerability management and attack surface reduction initiatives.

Identity & Access Management

• Provide executive oversight of IAM capabilities including Multi-factor Authentication (MFA), Privileged Access Management (PAM), Single Sign On (SSO), and Identity Governance and Administration (IGA).
• Lead cybersecurity risk assessment, treatment, and reporting activities.

Regulatory Compliance & Audit Support

• Support audits, regulatory reviews, and compliance requirements.

Cloud Security & Emerging Technology

• Oversee security governance for cloud platforms and emerging technologies.

Third-Party Risk Management

• Lead vendor management and third-party cybersecurity risk assessments.

Leadership & Team Development

• Lead, mentor, and develop cybersecurity team members.

Education

• Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, Engineering, or related field.

Required

• Minimum 12 years of progressive cybersecurity experience.
• Minimum 7 years of progressive leadership experience managing cybersecurity teams, with at least 3 years in a senior leadership (Manager or above) position.
• Experience in regulated or mission-critical environments.
• Experience developing cybersecurity strategy, policy, and governance programs.
• Experience developing and managing operating and capital budgets.
• Experience presenting cybersecurity risks and controls to leadership, partners, and other stakeholders.
• Experience working with industry recognized cybersecurity frameworks including NIST, HITRUST, and CIS.
• CISSP or CISM certification.

Preferred

• Master’s Degree in Cybersecurity, Information Assurance, Business or other related field.
• Experience in Academic Health System or other complex healthcare environment
• CCSP, CRISC, CISA, CGRC, GIAC certifications, cloud security certifications, TOGAF, SABSA.