Summary
Presbyterian Healthcare Services (PHS) seeks a dynamic, imaginative, and distinguished executive to serve as its next Chief Information Security Officer (CISO).
Opportunity
For the incoming CISO includes:
- Elevating the Security Posture: Transitioning the program from traditional technical oversight to a sophisticated, risk-based ecosystem.
- Leading Cyber Resiliency: Serving as the executive champion for business resiliency, ensuring that patient safety, member services, and continuity of care remain uninterrupted during cyber events, technology failures, or third-party disruptions.
- Driving Innovation Safely: Partnering with clinical and digital leaders to integrate security into the adoption of AI, cloud technologies (AWS), and emerging quantum-resilient frameworks, ensuring PHS remains at the forefront of safe healthcare delivery.
- Influencing at the Highest Levels: Acting as the primary advisor to the Compliance and Audit Committee of the Board and the Chief Growth Officer.
Job Description
Strategic & Security Leadership
Forward-Looking Strategy: Define and execute a multi-year, risk-based information security strategy aligned with PHS’s growth and innovation roadmap.
Governance & Maturity: Continuously mature the program using the NIST CSF and 405(d)-compliant frameworks to ensure critical systems are identified and reasonable controls are effectively executed.
Executive Advocacy: Act as the key advisor to the Board, translating cyber risk into clinical impact and fostering a culture of shared accountability.
Regulatory Watch: Stay abreast of state and national regulatory changes (HIPAA, HITECH, PCI DSS, JCAHO) and engage in professional development to keep PHS at the leading edge.
Policy, Compliance, and Audit Framework Management: Establish and maintain a comprehensive governance framework, including policies, standards, and risk appetite statements.
Technical Security Oversight: Lead efforts to evaluate the adequacy of security controls for both on-prem and cloud (AWS) systems.
Audit Excellence: Coordinate with Internal Audit and 3rd Party Auditors to keep audit focus in scope and maintain excellent relationships with regulatory entities.
Business Resiliency & Incident Response
Resiliency Strategy: Provide executive leadership for cyber-related business resiliency, ensuring alignment with patient safety and continuity objectives.
BC/DR Sponsorship: Serve as the executive sponsor for Business Continuity and Disaster Recovery capabilities related to ransomware and technology failures.
Incident Control: Act as the primary control point during significant incidents, convening the Cybersecurity Incident Response Team (CSIRT) as necessary.
Operational & Emerging Tech IAM & Data Governance: Advance identity and access management strategies and data governance capabilities, including privacy-by-design.
AI Governance: Participate in developing frameworks for secure adoption of AI and other emerging technologies.
Vendor Risk: Strengthen third-party risk management for both IT-sourced technologies and the medical device ecosystem.
Education/Certification
Required: Bachelor’s degree; Advanced cybersecurity certification (CISSP, CISM, CISA, HCISPP, or SANS 700+ Series).
Preferred: Advanced degree (Master’s or higher) in a related field.
Leadership Track Record
10+ years of progressive leadership in information security, with significant experience in large, complex healthcare systems.
Technical Depth
Demonstrated expertise in cybersecurity strategy, risk management, and governance frameworks (NIST, 405(d), SOC 2).
Deep understanding of digital transformation, AWS cloud security, and healthcare operations.
Soft Skills
Superior ability to prioritize tasks in high-pressure environments and excellent presentation/communication skills.
Core Competencies
Strategic Visionary: Able to anticipate industry demands and evolving external trends.
Decision Maker: Effectively leverages data to create organizational value while considering ethical and political factors.
Inclusive Leader: Champions an environment where diverse perspectives are valued and respected.
High Integrity: Models high standards of performance, confidentiality, and sound judgment.
About Us
Presbyterian Healthcare Services is a locally owned, not-for-profit healthcare system of nine hospitals, a statewide health plan and a growing multi-specialty medical group.