Director of Information Security Engineering

OU Health; Oklahoma City (OK); On-site; USD 140,000 - 210,000; Full time

Job summary

OU Health in Oklahoma City is seeking a Director of Information Security Engineering to lead a comprehensive security program within IT Information Security. This onsite role collaborates with the CISO and enterprise teams to protect patient data and technology assets.

You will manage a security team, define metrics and governance, drive policy, risk assessments and audit responses, and ensure security controls align with regulatory requirements.

Responsibilities

• Work with the CISO to develop a security program and security projects that address identified risks and business security requirements.
• Manage the process of gathering, analyzing and assessing the current and future threat landscape, as well as providing the CISO with a realistic overview of risks and threats in the enterprise environment.
• Work with the CISO to develop budget projections based on short- and long-term goals and objectives.
• Propose changes to existing policies and procedures to ensure operating efficiency and regulatory compliance.
• Manage a staff of information security professionals, hire and train new staff, conduct performance reviews, and provide leadership and coaching, including technical and personal development programs for team members.
• Assist resource owners and IT staff in understanding and responding to security audit failures reported by auditors.
• Provide security communication, awareness and training for audiences, which may range from senior leaders to field staff.
• Work as a liaison with vendors and the legal and purchasing departments to establish mutually acceptable contracts and service-level agreements.
• Manage production issues and incidents, and participate in problem and change management forums.
• Work with various stakeholders to identify information asset owners to classify data and systems as part of a control framework implementation.
• Serve as an active and consistent participant in the information security governance process.
• Work with the CISO and IT and business stakeholders to define metrics and reporting strategies that effectively communicate successes and progress of the security program.
• Provide support and guidance for legal and regulatory compliance efforts, including audit support.
• Consult with IT and security staff to ensure that security is factored into the evaluation, selection, installation and configuration of hardware, applications and software.
• Recommend and coordinate the implementation of technical controls to support and enforce defined security policies.
• Research, evaluate, design, test, recommend or plan the implementation of new or updated information security hardware or software, and analyze its impact on the existing environment; provide technical and managerial expertise for the administration of security tools.
• Work with the enterprise architecture team to ensure that there is

Job description

Position Title:

Director of Information Security Engineering

Department:

IT Information Security

Job Description:

*This position is onsite in Oklahoma City*

Essential Responsibilities:

Responsibilities listed in this section are core to the position. Inability to perform these responsibilities with or without an accommodation may result in disqualification from the position.

• Work with the CISO to develop a security program and security projects that address identified risks and business security requirements.
• Manage the process of gathering, analyzing and assessing the current and future threat landscape, as well as providing the CISO with a realistic overview of risks and threats in the enterprise environment.
• Work with the CISO to develop budget projections based on short- and long-term goals and objectives.
• Propose changes to existing policies and procedures to ensure operating efficiency and regulatory compliance.
• Manage a staff of information security professionals, hire and train new staff, conduct performance reviews, and provide leadership and coaching, including technical and personal development programs for team members.
• Assist resource owners and IT staff in understanding and responding to security audit failures reported by auditors.
• Provide security communication, awareness and training for audiences, which may range from senior leaders to field staff.
• Work as a liaison with vendors and the legal and purchasing departments to establish mutually acceptable contracts and service-level agreements.
• Manage production issues and incidents, and participate in problem and change management forums.
• Work with various stakeholders to identify information asset owners to classify data and systems as part of a control framework implementation.
• Serve as an active and consistent participant in the information security governance process.
• Work with the CISO and IT and business stakeholders to define metrics and reporting strategies that effectively communicate successes and progress of the security program.
• Provide support and guidance for legal and regulatory compliance efforts, including audit support.
• Consult with IT and security staff to ensure that security is factored into the evaluation, selection, installation and configuration of hardware, applications and software.
• Recommend and coordinate the implementation of technical controls to support and enforce defined security policies.
• Research, evaluate, design, test, recommend or plan the implementation of new or updated information security hardware or software, and analyze its impact on the existing environment; provide technical and managerial expertise for the administration of security tools.
• Work with the enterprise architecture team to ensure that there is