VP - Chief Information Security Officer

Prisma Health; Greenville (SC); Presencial; USD 150 000 - 230 000; Tempo integral

Resumo da oferta

Prisma Health is seeking a senior information security leader to manage the organization's information security program, risk management, and policy framework. This role ensures confidentiality, integrity, and availability of ePHI and PII, while guiding incident response and governance with executive oversight.

Responsibilities include risk assessment, security control design, awareness programs, and coordination with Privacy and Compliance teams to meet federal and state requirements.

Qualificações

• Bachelor's degree in Information Systems or related field.
• Ten (10) years of health industry IT and information security management experience.
• CISSP certification required or equivalent.

Responsabilidades

• Builds a strategic and comprehensive information security program with policies and processes.
• Oversees architecture security design review of infrastructure, IAM, networks, and cloud services.
• Promotes information security awareness across the health system.
• Manages security incidents involving ePHI and PII.
• Ensures disaster recovery and business continuity plans are tested.

Conhecimentos

Information security

Risk management

Policy development

Incident response

Compliance

Formação académica

Bachelor's degree in Information Systems or related field of study

Ferramentas

CISSP

Descrição da oferta de emprego

Responsible for the organization's Information Security Program including but not limited to daily operations of the IT security program, integrated risk management program, oversight of the annual and ongoing risk assessment process, development, implementation, and maintenance of policies and procedures, ensuring the confidentiality, integrity and access of electronic protected health information and of monitoring program compliance as well as investigation and tracking of incidents and breaches and in compliance with federal and state law. Serves as the health system designated security official under the HIPAA (Health Insurance Portability and Accountability Act of 1996) Security Rule.

Essential Functions

• All team members are expected to be knowledgeable and compliant with Prisma Health's purpose: Inspire health. Serve with compassion. Be the difference.
• Builds a strategic and comprehensive information security program that defines, develops, maintains and implements policies and processes that enable consistent, effective information security practices which minimize risk and ensure the integrity, confidentiality and availability of information that is owned, controlled and processed within the organization. Ensures information security policies, standards, and procedures are up to date.
• Oversees and collaborates architectural security design review of existing and new infrastructure systems to include identity and access management, networking, systems platforms, medical devices, IaaS, PaaS and SaaS services.
• Creates a culture of cyber security both within the ITS organization and driving behavioral changes for the entire health system. Initiates, facilitates, and promotes activities to foster information security awareness within the organization.
• Evaluates security trends, evolving threats, risks and vulnerabilities and applies tools to mitigate risk as necessary.
• Manages security incidents and events involving electronic protected health information (ePHI), personally identifiable information (PII) and corporate sensitive data.
• Ensure that the disaster recovery, business continuity and incident response plans are maintained and tested according to policy.
• Ensures the health system and joint venture partners comply with the administrative, technical and physical safeguards.
• Collaborates with senior management, Privacy Officer, and Corporate Compliance officer to establish governance for the security program and keeps health system Board of Directors informed.
• Partners with Human Resources and Privacy Officer to ensure consistent sanctions for security violations.
• Cooperates with the U.S. Department of Health and Human Service's Office for Civil Rights, State regulators and/or other legal entities, state and federal law enforcement in any compliance reviews or investigations.
• Performs other duties as assigned.
• Job has direct and/or indirect supervision of team members that may include final budget authority, hire/termination authority, performance appraisal responsibility and disciplinary authority. Job will be considered a member of management staff at Prisma Health Company or affiliate and will have direct reports.
• Education - Bachelor's degree in Information Systems or related field of study.
• Experience - Ten (10) years of health industry IT and information security management experience
• NA

Required Certifications, Registrations, Licenses

• Certified Information Systems Security Professional (CISSP)

Knowledge, Skills and Abilities

• Computer skills (word processing, spreadsheets, databases, and data entry)
• Mathematical skills
• Collaboration and problem-solving skills
• Knowledge of office equipment
• Knowledge of office equipment and basic computer skills including work processing, spreadsheets, databases and data entry.
• Knowledge and experience in state and federal information security laws, including but not limited to HIPAA, including NIST, PCI and all other applicable regulations.
• Familiarity with health care relevant legislation and standards for the protection of health information and patient security.