Apply on Employer Site

Monument Health · 9 hours ago

Director of IT Security

Rapid City, SD

Full-time

Onsite

Lead/Staff, Director/Executive

5+ years exp

Monument Health is a healthcare organization seeking a Director of IT Security to lead its cybersecurity program. This role is responsible for developing and implementing security strategies, managing a cybersecurity team, and advising executive leadership on information security and risk management.

Health CareHospitalNon ProfitRehabilitation

Responsibilities

Develop and maintain a comprehensive cybersecurity strategy aligned with business goals and risk tolerance

Prepare and deliver regular briefings to executive leadership and the Board on security posture, emerging threats, and mitigation strategies

Lead and manage the Cybersecurity team and oversee the day-to-day operations of the information security program, including monitoring, threat detection, and response

Develop and continuously evaluate and evolve Monument Health's information security roadmap and posture

Develop, implement, and monitor a comprehensive enterprise information security and risk management program

Align and prioritize actions within the cybersecurity program that align with Monument Health’s strategic goals, meets the needs of our operational units and focuses on data protection, threat management, and risk mitigation

Oversee incident response planning, and the investigation of any security incidents, ensuring timely reporting to the executive team and all relevant stakeholders

Provide regular reports to the executive team and boards on the status of the information security program and emerging threats

Implement, manage and enforce information security directives as mandated by Federal and State regulations, including but not limited to the Health Insurance Portability and Accountability Act (HIPAA)

Develop and enforce policies, procedures and standards; oversee caregiver security awareness training programs that promote a culture of security

Work in collaboration with the Business Continuity Coordinator to ensure that disaster recovery and business continuity needs of the organization are properly addressed

All other duties as assigned

Qualification

Cybersecurity strategyInformation security managementRisk managementHealthcare regulationsIncident response planningSecurity awareness trainingExecutive communicationTeam leadershipBachelor's degreeCISM certificationCISSP certificationCISA certification