Director of IT Cyber Security

The Security Executive Council; Miami Beach (FL); Vor Ort; USD 150.000 - 210.000; Vollzeit

Benefits dieser Stelle

Health benefits

Life insurance

Long-term disability coverage

Healthcare spending accounts

Retirement plan

Paid time off

Pet Insurance

Tuition reimbursement

Employee assistance program

Wellness program

On-site housing

Zusammenfassung

Mount Sinai Medical Center is seeking a Director of IT Cyber Security to provide strategic leadership for enterprise-wide cybersecurity and HIPAA compliance in a hospital environment. You will oversee governance, risk management, incident response, and policy development while partnering with executive and clinical teams to safeguard patient data and systems.

You will chair security initiatives, lead security program development, and drive training and awareness across the organization.

Qualifikationen

• 8 years of IT security experience
• CISSP certification desired
• Experience in risk assessment and HIPAA compliance

Aufgaben

• Lead enterprise-wide cybersecurity strategy and governance.
• Oversee risk management, incident response, and breach remediation.
• Collaborate with Privacy, Compliance, Audit, and clinical stakeholders.
• Develop and enforce security policies and training programs.
• Manage vendor security and third-party risk assessments.

Kenntnisse

IT Security

HIPAA awareness

Ausbildung

Bachelor's Degree in related discipline

Master's Degree preferred

Jobbeschreibung

About the job

As Mount Sinai grows, so does our legacy in high-quality health care. Since 1949, Mount Sinai Medical Center has remained committed to providing access to its diverse community. In delivering an unmatched level of clinical expertise, our medical center is committed to recruiting and training top healthcare workers from across the country. We offer the latest in advanced medicine, technology, and comfort in 12 facilities across Miami-Dade (including our 674-bed main campus facility) and Monroe Counties, with 38 medical services, including cancer care, 24/7 emergency care, orthopedics, cardiovascular care, and more. Mount Sinai takes pride in being South Florida's largest private independent not-for-profit hospital, dedicated to continuing the training of the next generation of medical pioneers.

Culture of Caring: The Sinai Way Our hardworking, tight-knit community of more than 4,000 dedicated employees fosters an environment of care and compassion. Each member plays a vital role in our collective mission to deliver excellent healthcare through innovation, education, and research. At Mount Sinai, we take pride in our achievements, aiming to be a beacon of quality healthcare in South Florida. We welcome all healthcare professionals to join our thriving community and contribute to our pursuit for clinical excellence.

Director of IT Cyber Security

Provides strategic leadership for enterprise-wide cybersecurity and HIPAA compliance within a hospital environment. Oversees security governance, risk management, and incident response while partnering with executive leadership, compliance, audit, and clinical stakeholders to protect patient data, systems, and infrastructure. Develops and enforces security policies, conducts risk and vulnerability assessments, leads breach response, and drives security awareness to ensure a resilient, compliant, and secure healthcare organization.

Position Responsibilities

• Establish and maintain a close working relationship with Privacy officer, compliance officer, internal audit, external audit, and other related constituencies.
• Serve as chair of hospital-wide security committee and participate in Board-level audit and compliance committees as required.
• Serve as HIPAA Security Officer and ensure all aspects of HIPAA compliance are maintained.
• Develop and maintain an IT Security Program that addresses the needs for assessment, prevention, detection, and response to security matters.
• Establish a policy program and ensure all IT and Security policies are up-to-date, accurate, and communicated/trained throughout the organization.
• Implement Risk Assessment and Management policies.
• Perform regular and complete risk and vulnerability scans, and provide detailed action plans to remediate risks.
• Develop and publish a Security Scorecard that measures the security risks and associated KPIs.
• Implement policies and procedures related to user access, including role-based access profiles, user provisioning/de-provisioning processes, SSO, and regular user access audits.
• Lead IT incident investigations, working with internal and external groups, including forensics, eDiscovery, etc.
• Lead breach reporting and remediation plans when necessary.
• Establish security standards as it relates to network, server, workstations, end user devices, OS, etc. and ensure contracts include standard language for all new systems to define security configurations.
• Manage and perform assessments for all new system implementations prior to go-live.
• Develop a comprehensive security awareness training program, including materials, new hire orientation presentation, Leadership materials, Board briefings, and housing content on a security awareness intranet site.
• Serve as point of contact for vendors and service providers regarding IT Security matters.
• Other duties as assigned.

Qualifications

• License/Registration/Certification
• Relevant certifications such as CISSP desired.
• Bachelor's Degree in related discipline, Master's Degree preferred.
• 8 years of IT Security experience desired.

Compensation / Benefits

• Health benefits
• Life insurance
• Long-term disability coverage
• Healthcare spending accounts
• Retirement plan
• Paid time off
• Pet Insurance
• Tuition reimbursement
• Employee assistance programWellness program
• On-site housing for select positions and more!