VP, Information Security

The Vice President, Information Security serves as the senior leader responsible for establishing, executing, and continuously enhancing LCS’ enterprise information security strategy. This role provides strategic leadership and oversight for cybersecurity, information security governance, and the technology responsibilities related to risk management, privacy protection, and regulatory compliance across LCS's portfolio of communities nationwide.

This role partners with executive leadership, community leaders, operational departments, technology teams, and third-party service providers to protect organizational assets, resident information, employee data, business operations, and critical technology infrastructure. This position leads a team of information security professionals and is responsible for developing a security-first culture while balancing operational effectiveness, regulatory requirements, and business objectives.

The Vice President, Information Security plays a critical role in safeguarding resident trust, ensuring compliance with healthcare and privacy regulations, mitigating cybersecurity threats, and enabling secure business growth throughout the LCS organization.

This position reports to the SVP, Chief Information Officer.

Experience is Everything.

At LCS, experience is everything. We provide you the opportunity to use your talents in a progressive, growing organization that makes a positive difference in the lives of the seniors we serve. If you are seeking an organization that gives back, you’ll love working here. Our principles and hospitality promises define our company culture. LCS employees can be found participating in volunteer activities, getting involved in our committees or collaborating with team members in our innovative workspace. You’ll find several opportunities to grow as a professional, serve the community, and enhance the lives of seniors. 

What You’ll Do: 

• Information Security Strategy & Leadership
  • Develop and execute a comprehensive enterprise information security strategy aligned with LCS business objectives, operational priorities, and technology roadmaps.
  • Establish long-term cybersecurity vision, goals, and performance measures for corporate operations and managed communities.
  • Serve as the organization's senior information security advisor to executive leadership and key stakeholders.
  • Provide regular updates to executive leadership regarding the organization's security posture, emerging threats, vulnerabilities, and risk mitigation initiatives.
  • Foster a culture of security awareness, accountability, and risk management throughout the organization.
  • Collaborate in the development of risk appropriate strategies for adoption of new technologies such as AI.
• Cybersecurity Governance & Risk Management
  • Establish and maintain enterprise-wide information security governance frameworks, policies, standards, and procedures.
  • Lead cybersecurity risk assessment programs across corporate systems, community operations, cloud environments, and third-party platforms.
  • Direct enterprise vulnerability management, threat assessment, and risk remediation strategies.
  • Oversee cybersecurity audits, compliance reviews, and security assessments.
  • Develop and maintain security metrics, dashboards, and executive reporting to measure program effectiveness.
  • Ensure information security risks are appropriately identified, evaluated, escalated, and managed.
• Community Security Oversight
  • Establish information security standards and controls for approximately 130 managed senior living communities across the United States.
  • Collaborate with operational leaders and community executive directors to ensure consistent implementation of cybersecurity and data protection requirements.
  • Develop scalable security approaches that support diverse operating environments while maintaining enterprise security standards.
  • Provide advisory services related to security risks associated with community-based systems, devices, networks, and operational processes.
  • Support acquisition, integration, and transition activities by ensuring information security requirements are addressed during community onboarding and disengagement activities.
• Security Operations & Incident Response
  • Provide executive oversight of enterprise security monitoring, threat detection, incident response,