Primary Location:

Med Plaza One - UMC

Address:

100 E Liberty St Louisville, KY 40202

Shift:

First Shift (United States of America)

Job Description Summary:

About UofL Health:
UofL Health is a fully integrated regional academic health system with five hospitals, four medical centers, nearly 200 physician practice locations, more than 700 providers, the Frazier Rehab Institute and Brown Cancer Center.
With more than 12,000 team members—physicians, surgeons, nurses, pharmacists and other highly skilled health care professionals—UofL Health is focused on one mission: delivering patient-centered care to each and every patient each and every day.

Job Description:

Position Summary and Purpose
The System Director Information Security reports to the CIO, is a member of the IS leadership team, and works closely with leadership across the organization. The AVP, Information Security is an advocate for the organizations total Information Security needs and is responsible for the development and delivery of a comprehensive information security strategy to optimize the security posture of ULH & BCC. The System Director Information Security leads the development and implementation of a security program that leverages collaborations, facilitates information security governance, advises leadership on security direction and resource investments, supports design of appropriate policies to manage information security risk and serves as the organization’s HIPAA Security Official. The complexity of this position requires a leadership approach that is engaging, imaginative, and collaborative, with the ability to work with other leaders to set the best balance between security strategies and other organizational priorities.
Essential Functions:
•    Manages the daily operation and implementation of the IT security strategy including governance, business continuity and disaster recovery, vulnerability and incident management, cybersecurity risk management, security operations, identity and access management, physical security and security compliance
•    Conducts continuous assessment of IT security practices and systems to identify areas for risk, noncompliance, and improvement
•    Communicates digital programs and strategies to stakeholders; reviews, analyzes, and delivers data information to stakeholders
•    Oversees security assessments and risk analyses, delivers new security technology approaches and next generation solutions and develops strategies and solutions to minimize the risk of cyberattacks
•    Ensures compliance and governance of programs
•    Manages the IT security budget; communicate to staff and appropriate parties
•    Communicate cybersecurity risk to the organization’s leadership
Other Functions:
•    Maintains compliance with all company policies, procedures and standards of conduct 
•    Complies with HIPAA privacy and security requirements to maintain confidentiality at all times
•    Performs other duties as assigned
 

Additional Job Description:

Job Requirements
(Education, Experience, Licensure and Certification)
Education:

•    Bachelor's degree in an Information Technology-related field or equivalent relevant experience (required)
•    Master’s Degree in an Information Technology-related field (preferred)

Experience:
•    15 years of professional experience in technical environments (required)

Certification:
•    Certified Information Systems Security Professional (CISPP) certifications or other industry-related certification (preferred)

Job Competency:
Knowledge, Skills, and Abilities critical to this role: 

•    Strong working knowledge of theory and practice within a specialized IT/IS field
•    Exemplifies service excellence – responsive, informs constituents of process, pleasant to work with, educates and provides timely, accurate information
•    Displays strong organizational skills – manages time effectively, keeps tasks appropriately prioritized and delegates appropriately; works proactively- anticipates and plans for problems before they arise; is able to perform work in a neat, efficient, well-coordinated, well communicated manner with a high degree of accuracy and professionalism  
•    Role models strong work ethic – motivated, diligent, industrious and persistent in the workplace, stays on tasks to completion, works at a fast pace to ensure optimal efficiency; remains flexible – ability to change directions, as needed, to ensure optimal outcomes
•    Displays strong interpersonal skills– can build effective, strong working relationships with employees, colleagues, management and vendors through trust, communication, and credibility; displays self-aw