Job Description

What are important things that YOU need to know about this role? Open to candidates for permanent remote positions: onsite attendance will be required approximately once a month for 2-3 days, typically Tuesday through Thursday. What will YOU be doing for us? The Chief Information Security Officer ("CISO") is responsible for the security of information in both the physical and digital form. The CISO will ensure compliance with key regulations and certifications with respect to information security and cyber defense. The CISO is also responsible for the monitoring and auditing of security related to personnel and physical assets. The CISO is accountable for the development and oversight of an information security program, which includes policies and procedures designed to protect enterprise communications, systems and assets from both internal and external threats. What will YOU be working on every day? Oversee and coordinate information security efforts across the company. Build a strategic and comprehensive information security program that enables consistent and effective information security practices which minimize risk and ensure the integrity, confidentiality and availability of information that is owned, controlled and processed within the organization. Ensure information security policies, standards, and procedures are up-to-date. Evaluate security trends, evolving threats, risks and vulnerabilities and apply tools to mitigate risk, as necessary. Initiate, facilitate, and promote activities to foster information security awareness within the organization. Create a culture of cyber security both within the IT organization and driving behavioral changes for the business. Responsible for development and implementation of security risk management plan. Direct staff in identifying, developing, implementing, and maintaining security processes, practices and policies to reduce risk, respond to incidents, and limit exposure and liabilities in all areas of information security. Responsible for initial and periodic information security risk assessment/analysis, mitigation and remediation. Ensure that the disaster recovery, business continuity, risk management and access control needs of the organization are addressed. Ensure organization has audit controls to monitor activity on electronic systems that contain or use electronic protected health information. Oversee periodic monitoring and reviewing of audit records to ensure that activity is appropriate. Such activity would include, but is not limited to, logons and logoffs, file accesses, updates, edits and printing. In conjunction with Legal, Compliance and HR, establish and administer a process for investigating and acting on security incidents which may result in a privacy breach. Manage security incidents and events involving electronic protected health information (ePHI) and/or electronic personally identifiable information (ePII). Maintain current knowledge of applicable federal and state security laws, licensing and certification requirements and accreditation standards. Maintain relationships with local, state and federal law enforcement and other related government agencies. What qualifications do YOU need to have to be GOOD candidate? Bachelor's degree in Information Technology or combination of extensive experience and networking certification. 10 years of IT management experience with a focus on information security Holds one or more Information Systems Security certifications (e.g. CISSP, CRISC, CompTIA Security). HIPAA security experience Experience implementing and managing healthcare information security certifications (e.g. HITRUST). Experience with business continuity planning, auditing, and risk management, as well as contract and vendor negotiation. Skilled in the following areas: Penetration Testing Malware Techniques and Defenses Forensic Analysis Network Security and Firewalls Vulnerability Management Secure Web Proxy Secure System Development Life cycle System Hardening Benchmarks Secure email Gateway Vendor & Cloud Security The salary range and midpoint is listed below for your reference. Please keep in mind that your education and experience along with your knowledge, skills and abilities are taken into consideration when determining placement within the range. Compensation Range: $176,474.00 - $264,710.00 Compensation Midpoint: $220,592.00 SKYGEN USA

Job Tags

Similar Jobs