VP Info Security

Fayette Chamber of Commerce; Atlanta (GA); On-site; USD 180,000 - 280,000; Full time

Job summary

Piedmont Healthcare seeks a visionary VP of Information Security to drive enterprise information security strategy, governance, and regulatory compliance across a complex healthcare delivery network.

The role reports to the CIO and partners with executive leadership to defend against advanced threats while enabling digital innovation, cloud adoption, and analytics in patient care.

Qualifications

• Bachelor's degree in a security-related field.
• 10+ years of progressive information security experience with senior leadership
• Experience building enterprise security programs and communicating with the Board/Executive leadership
• Certifications such as CISSP, CISM, CISO, CRISC, GSLC, HCISPP or HITRUST preferred

Responsibilities

• Develop and lead a comprehensive enterprise information security strategy aligned with business objectives and risk appetite.
• Govern security governance across policies, standards, procedures, and control frameworks (NIST CSF, HITRUST, ISO 27001).
• Serve as authoritative voice on cybersecurity strategy, risk posture, and regulatory compliance to CIO and Board committees.
• Lead enterprise cyber risk management, threat intelligence, vulnerability management, and incident response programs.

Skills

Leadership

Security governance

Strategic planning

CISO leadership

Board communication

Education

Bachelor's Degree in Computer Science, Information Security, Information Systems, or related field

Tools

NIST CSF

HITRUST

ISO 27001

Job description

STOP – if you are currently employed at Piedmont Healthcare, please click the “Current Employee” button above to submit your application.

VP Info Security

Overview:

The VP of Information Security is the senior executive accountable for the protection of Piedmont Healthcare
system's information assets, technology infrastructure, and patient data across a complex, integrated delivery
network. Reporting directly to the Chief Information Officer (CIO), this position provides strategic vision,
enterprise-wide governance, and hands-on leadership for all aspects of information security, cyber risk, and
regulatory compliance.

Will be responsible for building and sustaining a mature security program capable of defending against sophisticated threats targeting healthcare one of the most targeted sectors in the world while enabling the organization to leverage digital innovation, cloud platforms, and advanced analytics in support of its clinical and operational mission.

This role serves as a primary advisor to the CIO and the Information Security Steering Committee on all matters
of cybersecurity strategy, risk posture, and regulatory compliance, and is the organization's primary liaison to
government agencies, law enforcement, and external security partners in the event of a significant cyber
incident.

Responsibilities:

Security Strategy & Program Leadership

• Develop, implement, and continuously mature a comprehensive enterprise information security strategy
  aligned to business objectives, clinical operations, and the organization's risk appetite
• Build and govern a security program spanning people, processes, and technology including security
  architecture, engineering, operations, threat intelligence, and incident response
• Establish and maintain a security governance framework, including policies, standards, procedures, and
  control frameworks (NIST CSF, HITRUST, ISO 27001, or equivalent)
• Serve as the organization's authoritative voice on cybersecurity strategy, communicating risk posture and
  program maturity to the CIO, executive leadership, and Board Audit/Risk Committee
• Define and manage a multi-year security roadmap, balancing proactive investment with operational
  sustainability

Risk Management & Threat Intelligence

• Own the enterprise cyber risk management program identifying, assessing, prioritizing, and remediatingrisks across clinical, operational, and administrative systems
• Lead threat intelligence, vulnerability management, and red team/penetration testing programs to proactivelyidentify and address exposure
• Maintain situational awareness of the evolving healthcare threat landscape, including ransomware, nationstateactors, medical device vulnerabilities, and supply chain risk
• Develop and maintain a comprehensive third-party and vendor risk management program, including securityassessments for business associates and technology partners
• Ensure cyber risk is effectively quantified, reported, and integrated into enterprise risk management and
  strategic planning processes

Regulatory Compliance & Privacy

• Ensure the organization maintains compliance with all applicable information security and privacy regulationsincluding HIPAA, HITECH, 21st Century Cures Act, state privacy laws, and CMS requirements
• Collaborate with the Privacy Officer, Legal, and Compliance teams to align security controls with privacy
  obligations and to manage regulatory inquiries and breach notification requirements
• Lead preparation for and response to OCR audits, state regulatory reviews, and other external assessments
• Monitor the evolving regulatory and legislative landscape and proactively advise leadership on implications forthe security program

Clinical & Operational Technology Security

• Develop and lead a dedicated program for securing clinical technology, including medical devices, IoT/IoMT,connected diagnostics, and OT/ICS environments
• Partner with clinical engineering, nursing informatics, and physician leaders to implement security controlsthat protect patient safety without disrupting care delivery
• Drive secure design and deployment principles for EHR integrations, telehealth platforms, and digital healthsolutions
• Ensure security is embedded into system development lifecycle (SDLC) and technology procurement processesacross the enterprise

Leadership & Culture

• Build, mentor, and retain a high-performing security team of 3080 professionals across security
  architecture, engineering, operations, GRC, and awareness
• Cultivate a strong security culture across the organization through executive engagement, workforce training,and a security-by-design mindset
• Foster a collaborative, transparent relationship with the CTO, infrastructure, and application teams to integratesecurity into technology operations
• Establish strong relationships with peer CISOs, government agencies (HHS, CISA, FBI), and healthcareinformation sharing organizations (H-ISAC)

Qualifications:

Education

• Bachelors Degree in Computer Science, Information Security, Information Systems, or a related field required

Work Experience

• 10 years of progressive information security experience, with at least 7 years in a senior security leadership role (CISO, Deputy CISO, VP of Security, or equivalent)
• Demonstrated experience building and leading enterprise security programs at large, complex organizations healthcare experience strongly preferred
• Proven track record managing significant cybersecurity incidents, including ransomware response, data breach notification, and regulatory investigations
• Experience presenting to and advising boards of directors, audit/risk committees, and C-suite executives on cyber risk and security strategy
• Familiarity with clinical environments, medical device security, and the unique operational constraints of healthcare delivery

Licenses and Certifications

• Professional certifications strongly preferred: CISSP, CISM, CISO, CRISC, GSLC, or equivalent; HCISPP or HITRUST certification

Disclaimer: The above information is intended to describe the general nature and level of work being performed
by people assigned to this job. It is not intended to be an exhaustive list of responsibilities, duties and skills
required of personnel so classified.

Business Unit : Company Name:

Piedmont Healthcare Corporate

Apply Now