Healthcare Cybersecurity Leader — CISO & Strategy

Socket.dev; Pensacola (FL); On-site; USD 170,000 - 210,000; Full time

Job summary

Baptist Health Care, based in northwest Florida, seeks a strategic CISO to lead the enterprise information security program across clinical, operational, and business services. The role governs risk, compliance, incident response, and security awareness with a focus on protecting electronic health information and critical systems.

The CISO partners with executive leadership and clinical/engineering teams to advance security maturity while enabling patient care and organizational objectives.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Information Technology, Healthcare Informatics, or related field required; Master's preferred.
• Minimum 7 years of progressive information security experience, including 5+ years in a leadership role within healthcare.
• Professional certifications such as CISSP, CISM, CHPS, HCISPP, and/or CRISC are preferred.
• Knowledge of HIPAA, NIST, PCI and other applicable information security regulations.

Responsibilities

• Builds and leads a strategic, comprehensive information security program aligning with organizational goals.
• Oversees governance, risk management, and regulatory compliance across the enterprise.
• Directs incident response, cyber risk management, and business continuity planning.
• Collaborates with Privacy and Compliance leaders to address enterprise security requirements.
• Manages third‑party / vendor security assessments and risk controls.
• Communicates security posture to executives and the board; defines metrics and maturity benchmarks.

Skills

Security leadership

Regulatory compliance

Risk management

Security governance

Vendor risk management

Education

Bachelor's degree in Information Security / related field

Master's degree preferred

Job description

Baptist Health Care, based in northwest Florida, seeks a strategic CISO to lead the enterprise information security program across clinical, operational, and business services. The role governs risk, compliance, incident response, and security awareness with a focus on protecting electronic health information and critical systems.

The CISO partners with executive leadership and clinical/engineering teams to advance security maturity while enabling patient care and organizational objectives.