Virtual Chief information Security Officer

Fortified Health Security is in search of a results-driven Cyber Security Executive to serve as a Virtual Chief Information Security Officer (vCISO). Ideal candidate will have direct experience in managing a mature cybersecurity program in the healthcare industry with a demonstrable track record in evolving, leading, and holistically maturing a cybersecurity program. Visionary CISO leader with innate desire to bring an organization closer to a fully defensible cybersecurity posture. Experience in MSSP Relationships is a positive attribute. A leader that instills a Cybersecurity Culture and empowers team collaboration. A combination of soft-skills and technology expertise is desired., The following duties are normal for this position. The omission of specific statements of duties does not exclude them from being expected of this position if the work is similar, related, or a logical assignment for this position. Other duties may be required.

• Provide guidance and vision to fortify a hospital’s security posture in an advisory capacity.

• Work in lockstep with Client’s security and technology executive leadership to provide proven Cyber Security principles, practices, and leadership.

• Perform duties as an executive, leading and managing the client’s overall healthcare cybersecurity program.

• Review current cybersecurity roadmap and program efficacy to validate strategic plan and provide execution and delivery options.

• Participate in board meetings and presentations.

• Advise and coordinate cybersecurity objectives with the senior business and executive leadership teams.

• Lead and continue to advance the hospitals’ information cybersecurity program.

• Align information security practices and technology to the business and operational needs.

• Integrate with the hospital’s financial and technical leadership to orchestrate and detail a comprehensive information security budget.

• Advise and advance the organization’s information security strategic roadmap.

• Advance and lead efforts to administer a comprehensive defense-in-depth strategy to reduce cybersecurity risk to critical data assets within the Healthcare Information Technology (HIT) environment.

• Participate and/or lead healthcare Cybersecurity compliance and regulatory requirements.

• Participate and/or lead technical security projects.

• Participate or lead business impact assessments.

Do you have experience in Technology management?, Do you have a Master’s degree?, * Master’s degree, or equivalent - 15+ years related experience as an information security officer in a large-scale health care environment.

• CISSP or equivalent relevant cyber security professional certifications.

• Experience managing a cyber-practice/cybersecurity program across all aspects of the healthcare cybersecurity domain.

• 3 years in Senior Security Consultant role at Fortified.

Special Skills & Knowledge

• Proven leadership experience in advancing the maturation of a hospital cybersecurity program.

• Command experience developing and leading cybersecurity solutions for major medical organizations.

• Proven track record and experience in transformation outsourcing.

• Solid experience managing large teams and developing a team of cyber professionals.

• Demonstrable experience building and growing exceptional customer relationships.

• Depth of expertise in all eight areas of the cybersecurity domains.

• Strong technical mindset, understanding and abilities in both cybersecurity and data privacy.

• Ability to learn and apply Fortified’s SOPs and engagement methods to drive consistency in methods and approaches leveraged across our customer base.

• Background in, or understanding of, Information Technology solutions that impact an organization’s cybersecurity risk (identity management, firewall and networking solutions, patch management, cloud connectivity/integrations, etc.)

• Preferred experience providing cybersecurity consulting with healthcare organizations.

• Ability to track and log time based on Fortified SOPs across assigned clients.

• Ability to document or scope new client requests for assistance that may be out of scope from the current engagement.

• Applicable and thorough understanding of relevant HIPPA and NIST standards as it pertains to the medical industry.

• Excels in presentation orchestration and public speaking to large groups.

• Inspired leader who enjoys membership in industry recognized cybersecurity organizations.

• Well versed in all areas of data governance, compliance, and relevant industry standards in the medical and patient care industry.

• Experience as a primarily remote, executive-level, security consultant in large healthcare environments preferred

• Executive level communicator; at home in an executive hospital-based IT organization.

Licenses, Certifications, etc.

• CISSP/ CISM or equivalent