Director of IT Security

Current Employees:

If you are a current employee, please apply via the internal career site by logging into your Workday Account and clicking the "Career" icon on your homepage.

Primary Work Location

Turbine Drive Building

Department

CS IT Security

Scheduled Weekly Hours

40

Job Summary

The Director of IT Security is a strategic and operational leader responsible for the development, implementation, and oversight of the organization’s cybersecurity program. Reporting to the Senior Director of Technology and Security, the role serves as the primary advisor to executive leadership and the Board of Directors on matters of information security, risk management, and regulatory compliance. This role ensures the protection of sensitive patient data, clinical systems, and enterprise infrastructure while fostering a culture of security across all departments. This leader will bring deep expertise in healthcare regulations (HIPAA, HITECH, HITRUST), a strong executive presence, and the ability to translate complex technical risks into actionable business insights.

Monument Health offers competitive wages and benefits on qualifying positions. Some of those benefits can include:

*Supportive work culture

*Medical, Vision and Dental Coverage

*Retirement Plans, Health Savings Account, and Flexible Spending Account

*Instant pay is available for qualifying positions

*Paid Time Off Accrual Bank

*Opportunities for growth and advancement

*Tuition assistance/reimbursement

*Excellent pay differentials on qualifying positions

*Flexible scheduling

Job Description

Essential Functions:

• Develop and maintain a comprehensive cybersecurity strategy aligned with business goals and risk tolerance.
• Prepare and deliver regular briefings to executive leadership and the Board on security posture, emerging threats, and mitigation strategies.
• Lead and manage the Cybersecurity team and oversee the day-to-day operations of the information security program, including monitoring, threat detection, and response.
• Develop and continuously evaluate and evolve Monument Health's information security roadmap and posture.
• Develop, implement, and monitor a comprehensive enterprise information security and risk management program.
• Align and prioritize actions within the cybersecurity program that align with Monument Health’s strategic goals, meets the needs of our operational units and focuses on data protection, threat management, and risk mitigation.
• Oversee incident response planning, and the investigation of any security incidents, ensuring timely reporting to the executive team and all relevant stakeholders.
• Provide regular reports to the executive team and boards on the status of the information security program and emerging threats.
• Implement, manage and enforce information security directives as mandated by Federal and State regulations, including but not limited to the Health Insurance Portability and Accountability Act (HIPAA).
• Develop and enforce policies, procedures and standards; oversee caregiver security awareness training programs that promote a culture of security.
• Work in collaboration with the Business Continuity Coordinator to ensure that disaster recovery and business continuity needs of the organization are properly addressed.
• All other duties as assigned.

Additional Requirements

Required:

Physical Requirements:
Sedentary work - Exerting up to 10 pounds of force occasionally and/or negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time. Jobs are sedentary if walking and standing are required only occasionally and all other sedentary criteria are met.

Job Category

Information Technology

Job Family

Business Systems

Shift

Employee Type

Regular

15 Corporate Services Division

Make a difference.  Every day.

Monument Health is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or protected Veteran status.