FILLED Manager - Information Security

HonorHealth; Phoenix (AZ); Hybrid; USD 110,000 - 160,000; Full time

Job summary

HonorHealth is seeking an Information Security Manager to lead the implementation and support of formal Information Security frameworks across the organization. You will promote a culture of security, balance protection with accessibility, and optimize the security posture to safeguard information resources.

The role requires 8+ years of healthcare IT security leadership, ITIL v3 Foundation and advanced security certifications. Hybrid work in Arizona with on-site Thursday presence is supported.

Qualifications

• Bachelor’s degree in IT or business administration required.
• ITIL v3 Foundation certification preferred.
• Professional certifications such as CISM, CISA, CISSP or equivalent preferred.
• 8+ years of management experience in healthcare environment with healthIT applications preferred.

Responsibilities

• Lead implementation and support of formal Information Security frameworks.
• Promote a culture of information security across HonorHealth.
• Directly manage HR aspects in assigned area and provide metrics for KPIs.
• Coordinate security incident management and escalation procedures.
• Ensure policies and procedures meet standards and align with business requirements.

Skills

Leadership

Information security

Threat & vulnerability management

Identity and access management

Architecture and engineering

Data protection

Governance, risk and compliance

Security operations

Incident response

Education

Bachelor’s degree in information technology or business administration

ITIL v3 Foundation Certification

CISM

CISA

CISSP (or equivalent)

Job description

Primary City/State:Deer Valley - 2500 W Utopia Rd Phoenix, AZ 85027Category:Information SecurityShift:DayDepartment:Information SecurityHybrid, must reside in Arizona1 day on-site (Thursday)Great care starts with great people. (Like you.)At HonorHealth, you’ll find something special. From humble beginnings in 1927 to one of Arizona’s largest nonprofit healthcare systems, our culture is built on warmth and neighborly kindness. Behind every smile is a highly skilled professional with deep expertise and an unwavering dedication to what matters most — caring for the health and well-being of people and communities across the greater Phoenix area.Responsibilities:JOB SUMMARYThe Information Security Manager (ISM) is responsible for leading the implementation and support of formal Information Security frameworks and will take a central role in promoting a culture of information security throughout HonorHealth. The ISM will ensure HonorHealth has the protections and controls to effectively ensure the Confidentiality, Integrity and Availability (CIA) of information resources. The ISM will serve a critical role in optimizing HonorHealth's security posture to protect information resources from attack, theft, damage or unauthorized access. The ISM will lead the HonorHealth in the adoption and use of strong security measures to protect sensitive information, systems and resources, while balancing this with the ease of staff and stakeholder access to sensitive information and the efficient use of computer systems.ESSENTIAL FUNCTIONSProvide leadership direction and subject matter expertise across one or more of our Information Security pillars including, Threat and Vulnerability Management; Identity and Access Management; Architecture and Engineering; Data Protection; Governance Risk and Compliance; Security Operations; Security Awareness and Incident Response.Directly manages all human resource aspects of personnel management within assigned area including selection of new associates, initial and ongoing development, evaluation, counseling, scheduling, etc. Creates and updates standard work; Provide metrics for identified key performance indicators; Plans, establishes and revises work assignments; Monitors service management queues for work directives.Maintains customer-driven relationship with the operational departments across HonorHealth system care sites and corporate areas. Ensures that policies and procedures meet standards. Actively participates in decision making with management and seeks to understand the broader impact of current decisions and the effects on business requirements that will translate into system requirements.Provides direction as first point of contact for security incident escalations. Ensure that security incident escalation procedures are followed by all staff according to policy. Ensure that security events are clearly documented and contain detailed information regarding issue tracking and resolution. Identify and report system and network security issues ensuring all events are entered in ticket tracking application and escalated accurately. Ensure that all issues are proactively tracked and monitored to ensure timely resolution. Coordinate security incident management events follow escalation procedures as documented according to policy. Assists the Security team in security incident resolution and risk evaluations. Maximize value of purchased Information Security tools.Performs other duties as assigned.EDUCATIONBachelors or 4 years' work related experience Information Technology or Business Administration RequiredEXPERIENCE5 years, IT management or supervisory practices, in areas such as Threat and Vulnerability Management; Identity and Access Management; Architecture and Engineering; Data Protection; Governance Risk and Compliance; Security Operations; Security Awareness and Incident Response. Required8 years, Management experience in a health care environment and with health care applications and multi-institutional health systems or health care consulting experience PreferredLICENSE AND CERTIFICATIONSInformation Technology Infrastructure Library V3 Certification - Certification, Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), ITIL v3 Foundation Certification PreferredCertified Information Systems Security Professional - Certification, Combination of one or more of the following - CISSP, SAN Certs PreferredWe're all in for your career.