Description
Executive Director Of It Security And Chief Information Security Officer (Ciso)JPS Health Network, a publicly funded health network serving Tarrant County in North Texas, is seeking an accomplished cybersecurity executive as its next Executive Director of IT Security and Chief Information Security Officer (CISO). This newly created role will establish information security as an independent function with a dedicated executive owner.
Reporting to the Senior Vice President, Chief Information Officer, with an additional reporting line to the Chief Executive Officer, the CISO will serve as JPS's HIPAA Security Official and enterprise-wide owner of cybersecurity strategy, governance, architecture, operations, identity and access management, data protection, incident response, and third-party risk management. Key priorities include: (1) developing and executing a multi-year information security roadmap, including a full assessment of current tooling and vendor relationships; (2) maturing governance, audit readiness for NIST and HIPAA, and executive- and Board-level reporting; (3) building and leading the security organization, including close partnership with JPS's IT Risk Manager; and (4) managing vendor relationships for outsourced security services, such as a Security Operations Center or Managed Security Service Provider, alongside direct people leadership.
The CISO provides strategic leadership for JPS Health Network's enterprise information security and cyber resilience program. This role serves as the organization's HIPAA Security Official and is accountable for cybersecurity strategy, governance, architecture, operations, identity and access management, data protection, incident response, regulatory compliance, and third-party risk management. The CISO leads the information security organization, partners across clinical and business functions, and advises executive leadership and the Board of Managers on cybersecurity risk and resilience. The incoming CISO will inherit a stabilized technical foundation with meaningful room to shape multi-year tooling, governance, and staffing decisions.
Position requirements include:
Bachelor's degree in cybersecurity, information systems, computer science, business administration, health informatics, or related field of study from an accredited college or university.Advanced degree preferred.CISSP or CISM certification required; HCISPP or CRISC preferred.10 or more years of information security experience; to include experience protecting complex clinical, business, and infrastructure environments in a healthcare setting, operating within a county, public, academic, safety net, or federally qualified health center environment, and experience building or maturing a security program with full budget accountability.5 or more years of progressive leadership experience working in an information security role within a healthcare provider, health system, academic medical center, or similarly regulated environment; to include experience leading enterprise incident response for a material cybersecurity event.Experience building or maturing a security program with full budget accountability, including management of outsourced security vendors (e.g., SOC, MSSP), is preferred.Experience supporting executive leadership and cross-functional strategic initiatives is preferred.Experience with a greenfield or major capital facility technology security buildExperience leading a Zero Trust program from strategy through operational execution.Experience securing a connected medical device and Internet of Medical Things environment at scale.