InfoSec Engineering Director: Strategy & Risk

OU Medicine, Inc.; Central Park (WA); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

PTO

401(k)

Medical and dental plans

Job summary

OU Health is seeking a Director of Information Security Engineering to lead the IT Information Security program from the Oklahoma City campus. You will partner with the CISO to manage risk, budgets and security policies, while guiding a team of security professionals and coordinating with legal, purchasing and enterprise stakeholders to ensure regulatory compliance and effective incident response.

The role requires strong leadership, deep information security knowledge, and the ability to

Qualifications

• Bachelor's degree in information systems required.
• MBA or MS in information security preferred.
• 8 years IT experience with 5 years in information security and 5–7 years of leadership experience.
• Certifications required within 6 months of hire: CISSP, CISM, CCSP, CISA, CEH.

Responsibilities

• Develop a security program and projects addressing risks and business security requirements.
• Analyze threat landscape and provide risk overview to the CISO.
• Develop budget projections for short- and long-term goals.
• Lead and develop the information security team and provide coaching.
• Coordinate with vendors, legal, and purchasing on contracts and SLAs.
• Oversee incident management, audits, and regulatory compliance.

Skills

Security leadership

Risk assessment

Policy development

Incident management

Vendor management

Education

Bachelor's degree in information systems

MBA or MS in information security (preferred)

Job description

OU Health is seeking a Director of Information Security Engineering to lead the IT Information Security program from the Oklahoma City campus. You will partner with the CISO to manage risk, budgets and security policies, while guiding a team of security professionals and coordinating with legal, purchasing and enterprise stakeholders to ensure regulatory compliance and effective incident response.

The role requires strong leadership, deep information security knowledge, and the ability to