Regional Information Security Officer

UnityPoint Health; Des Moines (IA); Remote; USD 70,000 - 110,000; Full time

Job summary

An established industry player is seeking a Regional Information Security Officer to oversee and enhance their information security program. This remote role requires a proactive leader who can manage compliance with healthcare regulations and security standards while fostering a culture of awareness and risk management. The ideal candidate will have a strong background in information security, excellent communication skills, and the ability to collaborate effectively with various stakeholders. Join a recognized top workplace that values your contributions and offers a comprehensive benefits package to support your professional growth and personal well-being.

Benefits

Paid Time Off

Parental Leave

401K Matching

Health Insurance

Dental Insurance

Paid Holidays

Disability Coverage

Tuition Reimbursement

Adoption Assistance

Early Wage Access

Qualifications

• 5+ years of experience in information security or healthcare regulations.
• Strong understanding of HIPAA and security controls.

Responsibilities

• Manage the information security program and ensure compliance with policies.
• Conduct risk assessments and promote security awareness across the organization.

Skills

Information Security Management

Risk Assessment

HIPAA Compliance

Communication Skills

Disaster Recovery Planning

Education

Bachelor's Degree

Job description

• Remote: Yes
• Area of Interest: Business Professionals
• FTE/Hours per pay period: 1.0
• Department: Information Protection
• Shift: 80/M-F
• Job ID: 162855

Overview

The Regional Information Security Officer (RISO) is responsible for executing and overseeing the system-wide information security program under the direction of the Chief Information Security Officer (CISO). The RISO promotes adoption of enterprise information security initiatives, assesses and manages risks, acts as an escalation point for security issues within their region, affiliate, or service line, and liaises between the business and System Services. The role involves coordinating efforts to ensure compliance with the UnityPoint Health (UPH) Information Security Program, safeguarding information assets, and performing ongoing risk assessments.

Location: Remote - applicants must reside in Iowa, Illinois, or Wisconsin, with monthly travel to UPH facilities.

Why UnityPoint Health?

At UnityPoint Health, you matter. We are recognized as a Top 150 Place to Work in Healthcare by Becker's Healthcare. Our Total Rewards program includes paid time off, parental leave, 401K matching, health and dental insurance, paid holidays, disability coverage, early wage access, tuition reimbursement, and adoption assistance. We foster a culture of belonging and provide support and development opportunities to help you thrive.

Responsibilities

Advancement of Information Security Program in Region, Affiliate, or Service Line

• Support projects to develop, implement, manage, and enforce security directives compliant with laws and mitigate risks.
• Manage the information security program, including policies, procedures, training, infrastructure, and monitoring.
• Integrate security with business strategies and ensure controls like access, disaster recovery, and incident response are addressed.
• Promote security awareness and conduct risk assessments and audits.
• Collaborate with vendors and third parties to enhance security measures.
• Monitor and report on the effectiveness of the security program.
• Coordinate with Privacy Officers to protect PHI.
• Stay updated on security threats, incidents, and regulations.

Customer Service

• Serve as the ISO for the region, providing guidance on security questions and concerns.
• Support UPH's strategic goals while addressing specific system needs.
• Monitor, investigate, and respond to security violations.
• Communicate policies and standards across all management levels.

Security Standards, Policies, and Compliance

• Oversee risk assessments and management processes.
• Assist with incident response, business continuity, and disaster recovery planning.
• Develop security awareness and training programs.
• Ensure compliance with UPH policies, standards, and legal requirements.
• Report non-compliance issues to authorities and leadership.

Qualifications

• Bachelor's degree required; equivalent experience acceptable if relevant to information protection.
• Minimum five years of experience in information security or healthcare regulations.
• Strong understanding of HIPAA, security controls, auditing, and disaster recovery.
• Excellent communication, planning, and organizational skills.
• Knowledge of computer systems, applications, and architecture.