Healthcare Information Security Executive

Security Executive Council; Atlanta, Northern (GA, KY); Hybrid; USD 200,000 - 350,000; Full time

Job summary

Piedmont Healthcare is seeking a visionary VP of Information Security to lead a mature security program across its integrated delivery network. This executive will drive governance, risk management, and regulatory compliance while enabling digital health initiatives, cloud adoption, and secure clinical operations.

The role reports to the CIO and collaborates with the Information Security Steering Committee, external partners, and government agencies to protect patient data and infrastructure at

Qualifications

• Bachelor's degree required.
• 10 years of information security experience, with 7+ in a senior leadership role.
• Healthcare security experience strongly preferred.
• Proven incident response, regulatory investigations, and board-advising experience.

Responsibilities

• Develop and mature a comprehensive enterprise information security strategy aligned to business and clinical needs.
• Build and govern a security program spanning people, processes, and technology.
• Establish and maintain a security governance framework including policies and controls (NIST CSF, HITRUST, ISO 27001).
• Serve as the authoritative voice on cybersecurity strategy to CIO, leadership, and Board committees.
• Lead enterprise risk management and threat intelligence programs across the organization.

Skills

Strategic leadership

Information security

Regulatory compliance

Stakeholder communication

Education

Bachelor's Degree in Computer Science, Information Security, or related field

Job description

Piedmont Healthcare is seeking a visionary VP of Information Security to lead a mature security program across its integrated delivery network. This executive will drive governance, risk management, and regulatory compliance while enabling digital health initiatives, cloud adoption, and secure clinical operations.

The role reports to the CIO and collaborates with the Information Security Steering Committee, external partners, and government agencies to protect patient data and infrastructure at