PeaceHealth is seeking a System Director of Information Security Integrity for a 1.0 full time equivalent Exempt position. This position will be working Day shift with shift durations of 8 Hours .
Req ID: 155945
JOB SUMMARY Responsible for directing, monitoring and ensuring compliance with information security regulations and best practices that apply to the PeaceHealth enterprise, including developing and implementing policies. Leads the development and implementation of a security program that leverages collaborations and enterprise-wide resources, facilitates information security governance, and advises senior leadership on security direction and resource investments. Leads responses to allegations of information security breaches and continuously monitors the enterprise for risks that compromise information security and compliance. Maintains expertise related to information security risks on a global and local level. Serves as the corporate chief information security officer (CISO) for compliance and regulatory purposes.
Establishes, maintains, and leads the development and adoption of Information security standards, best practices and measures in collaboration with Technology Solutions Partners (TSP) and other key leaders across PeaceHealth. Establishes and implements an Enterprise Security Framework for people, process, and technology to ensure conformance to the TSP Architecture standards. Leads governance collaboration across TSP teams, organizational stakeholders, partners and vendors. Oversees timely distribution of security incident responses and clear escalation procedures to ensure timely and effective handling of all situations.
Provides leadership, vision and management for assigned staff. Responsible for analyzing resource requirements of the department, hiring, coaching and developing staff. Responsible for preparing and managing the department budget, tracking expenditures, with budget authority as delegated for assigned areas. Promotes collaborative, empowered working environments across the enterprise, removing barriers and realizing possibilities.
Prepares presentations for senior leadership to communicate security maturity and risks.
Develops and ensures maintenance of security reporting metrics to support key decision makers. Performs analysis of network traffic patterns, system logs, and audit files for compliance with security policies on all systems. Monitors, distributes, and analyzes security alerts and information.
Oversees and monitors operational security measures in support of organizational disaster recovery efforts. Conducts ongoing risk assessments and offers mitigation strategies.
Monitors an Identity and Access Management (IAM) program. Analyzes access control requests, making informed decisions about appropriate access.
Performs security risk assessments and routine security vulnerability testing and analysis including: network, server, data base, and information usage. Maintains Intrusion Detection/Prevention System. Conducts internal security and confidential information investigations and information usage security audits.
Establishes annual and long-range security and compliance goals; defines security strategies, metrics, reporting mechanisms and program services; and creates maturity models and a roadmap for continual program improvements.
Provides leadership, direction and guidance in assessing and evaluating information security risks and monitors compliance with security standards and appropriate policies.
Bachelor's Degree in Computer Science, Information Systems or relevant field required.
A Master's degree in computer science or related field is preferred.
Minimum of seven (7) years of experience managing information system access, security and risk assessment.
Minimum of ten (10) years of management experience.
Experience in the use of on-line/real-time mid-range, server, or personal computers; and the applications, tools and equipment associated with their installation, modification and support.
Knowledge and experience of Health Level 7 (HL7), ANSO, other healthcare system standards, HIPAA, JCAHO or other healthcare regulatory compliance standards and clinical applications/technology is preferred.
Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) is preferred.
Excellent written, oral and presentation communication skills.
Strong analytical and problem solving skills.
Strong interpersonal and conflict resolution skills.
Collaborative leader with a demonstrated track record of working with all levels of management.
Ability to manage complex matters and deal with highly sensitive issues and maintain confidentiality.
Able to work independently and consultatively.
Ability to exercise strong judgment in analyzing, appraising, evaluating and solving problems of a difficult procedural, organizational, administrative or technical nature.
Please apply online to be considered. For full consideration of your skills and abilities, please attach a current resume with your application.
PeaceHealth, based in Vancouver, Wash., is a not-for-profit Catholic health system offering care to communities in Washington, Oregon, and Alaska. PeaceHealth has approximately 16,000 caregivers, a multi-specialty medical group practice with more than 900 providers and 10 medical centers serving both urban and rural communities throughout the Northwest. In 1890, the Sisters of St. Joseph of Peace founded what has become PeaceHealth. Today, PeaceHealth is the legacy of its founding Sisters and continues with a spirit of respect, stewardship, collaboration and social justice in fulfilling its Mission.
We offer competitive compensation, a robust benefits package and a collaborative, Mission-driven work environment! To learn more about working at PeaceHealth and the Vancouver community please visit our homepage: www.peacehealth.org/careers .
Location: Vancouver , Shared Services Center (802) Job Category: Leadership Shift: Day Shift Length: 8 Hours FTE: 1.0 Work Type: Full Time Hourly compensation starts at: $ .00 , more depending on experience Required Certifications/Licensure:
PeaceHealth is committed to providing equal employment opportunities to all qualified job applicants and employees without regard to the following statuses: protected veteran; qualified individual with a disability; race; ethnicity; religion; gender; pregnancy; gender identity; national origin; age; genetic information; sexual orientation; or any other protected status in accordance with local, state, or federal laws.
The above information is intended to indicate the general nature and level of work performed by this position. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of caregivers assigned to this job.
Posting Notes: Vancouver || Leadership || Executive Leadership || Full Time || ORG INTEGRITY
PeaceHealth Physicians are as diverse as the communities they serve, but have the following in common:Dedication to carrying on the healing mission of Jesus Christ by promoting personal and community health, relieving pain and suffering and treating each person in a loving and caring way.A shared vision of every patient receiving exceptional, compassionate evidence-based care, every time, every touch.