Memorial Health System
This position embodies the Memorial Health System Performance Excellence Standards of Safety, Courtesy, Quality, and Efficiency that support our mission, vision and values. These standards are evident in the daily work, which includes the following:
Establishes and implements the organizational information security strategy and program to ensure information assets and technologies are adequately protected.
Oversees and coordinates information security efforts across the organization to identify, assess and manage IT risks.
Manages the ongoing validation of Information Security compliance with applicable laws and regulations.
Manages the Information Security team.
Requirements for this position include:
Master Degree in Health Information Management, Computer Science, Business, Health Care, or related discipline required.
CISSP (Certified Information Systems Security Professional), CISM (Certified Security Manager) and/or CISA (Certified Information Systems Auditor) designation or similar security related certification required
Minimum seven (7) years of information security experience required.
Minimum of seven (7) years of experience in the identification and design of control and testing methodologies required.
Minimum of five (5) years supervisory or demonstrated leadership experience required.
Demonstrated experience with healthcare clinical and financial applications.
Demonstrated ability in the identification, assessment, and evaluation of risks, controls mitigating strategies.
Demonstrated experience in successfully partnering with internal departments and external organizations.
Demonstrated experience in a health care hospital or system in the Chief Information Security Officer role.
Experience meeting regulatory requirements while achieving exceptional quality standards.
Current information technology and security knowledge and experience, including a broad range of knowledge of computer systems, security technologies, health care applications, infrastructure and network architectures.
Advanced understanding of information security technologies, systems design, integration of systems, infrastructure, and networking.
Extensive knowledge and application of QA methodologies to application and infrastructure operations.
Excellent written and oral communication skills required, with the ability to effectively communicate with technical professionals as well as senior leaders.
Evidence of leadership, creativity, integrity, and initiative. Evidence of ability to achieve results and inspire others to do the same, personal accountability, and dedication to continue learning and investigating relevant technology required.
Demonstrated strong skills in personal diplomacy; demonstrates personal traits of a high level of motivation, team orientation, professionalism and trustworthiness.
Demonstrated sound decision-making ability, operate well under pressure and be tenacious in resolving difficult problems. Able to manage multiple priorities and work independently.
Must be motivated to achieve results personally and through others, particularly related to providing exceptional customer service. Must be results oriented and be able to manage time effectively.
Maintains availability for security incident response/resolution which may include, 24 hour and/or weekends.