Deputy Chief Information Officer: Chief Technology and Information Security Officer (CTISO) - Information Solutions

Job Description Summary

The Chief Technology and Information Security Officer (CTISO) is a transformational executive responsible for advancing MUSC’s tripartite mission of clinical care, research, and education through secure, reliable, and modern technology.

Entity

Medical University Hospital Authority (MUHA)

Worker Type

Employee

Worker Sub-Type​

Regular

Cost Center

CC002269 SYS - IS Senior Leaders

Pay Rate Type

Salary

Pay Grade

Health-00

Scheduled Weekly Hours

40

Work Shift

Job Description

The Chief Technology and Information Security Officer (CTISO) is a transformational executive responsible for advancing MUSC’s tripartite mission of clinical care, research, and education through secure, reliable, and modern technology.

Evolving from traditional CISO and CTO roles, the CTISO integrates enterprise technology infrastructure, cloud platforms, networks, core services, and information security into a single, strategic function. The CTISO ensures that MUSC’s technology environments are scalable, secure, resilient, and cost effective, and that information security is embedded across clinical, research, and academic operations.

The CTISO leads a highly service oriented, mission aligned organization that partners with clinical, research, academic, business, and administrative leaders. The role balances innovation with risk management, oversees 24x7x365 technology operations, and positions MUSC as a leader in secure digital health, research technology, and academic computing.

Reporting & Scope

• Reports to: Enterprise Chief Information Officer

• Direct leadership: Leaders of Infrastructure and Operations, Networking, Cloud and Platforms, End User Technology, Information Security and Cybersecurity, Identity and Access Management, and related shared services

• Decision rights (shared with Legal, Compliance, CEIO as appropriate): Enterprise technology standards, security architecture, IAM policies, security tools and platforms, cyber incident response, disaster recovery and business continuity strategies, major infrastructure and cloud investments

• Budget responsibility: Owns and manages enterprise technology and information security operating and capital budgets in alignment with MUSC financial planning processes

• Work model: Hybrid, Charleston, SC (within MUSC policy); statewide travel to MUSC campuses and affiliates as needed

Key Responsibilities

Strategic Leadership and Governance (20%)

-Define and champion MUSC’s enterprise technology and cybersecurity vision, positioning secure and reliable technology as a strategic enabler of the tripartite mission.

-Serve as a key member of the IS executive management team and primary advisor to the CIO on technology operations, infrastructure, and cybersecurity.

-Establish and maintain a governance and risk management framework that aligns with MUSC policies, regulatory requirements, and industry standards.

-Develop multiyear technology and security roadmaps that balance foundational stability with modernization and innovation.

-Own multiyear and annual operating and capital budgets for enterprise technology and information security, ensuring that investments are prioritized, sequenced, and tracked against plan.

-Provide regular updates to executive leadership and the Board on technology strategy, cyber risks, incidents, and program maturity.

Technology Infrastructure and Operations (20%)

-Oversee the design, implementation, and operation of MUSC’s enterprise infrastructure, including private and public cloud, data centers, networks, platforms, core services, and personal computing.

-Ensure 24x7x365 reliability, scalability, and performance across hospitals, ambulatory sites, research facilities, and academic campuses.

-Lead capacity planning, performance monitoring, and continuous improvement of infrastructure and operations.

-Optimize technology investments through platform rationalization and life cycle management and disciplined financial stewardship of operating and capital funds.

Information Security, Risk Management and IAM (20%)

-Lead a comprehensive information security program that protects clinical, research, and academic data and systems.

-Oversee cyber risk assessment, vulnerability management, security architecture, security operations, and incident response.

-Own Identity and Access Management (IAM) across the enterprise, ensuring appropriate access, automation of provisioning and deprovisioning, and regular access reviews.

-Ensure compliance with HIPAA, HITRU