Vice President, Deputy Chief Information Security Officer

Planned Parenthood is the nation’s leading provider and advocate of high-quality, affordable sexual and reproductive health care for all people, as well as the nation’s largest provider of sex education. With more than 600 health centers across the country, Planned Parenthood organizations serve all patients with care and compassion, with respect, and without judgment, striving to create equitable access to health care. Through health centers, programs in schools and communities, and online resources, Planned Parenthood is a trusted source of reliable education and information that allows people to make informed health decisions. We do all this because we care passionately about helping people lead healthier lives.
Planned Parenthood Federation of America (PPFA) is a 501(c)(3) charitable organization that supports the independently incorporated Planned Parenthood affiliates operating health centers across the U.S. Planned Parenthood Action Fund is an independent, nonpartisan, not-for-profit membership organization formed as the advocacy and political arm of Planned Parenthood Federation of America. The Action Fund engages in educational, advocacy, and electoral activity, including grassroots organizing, legislative advocacy, and voter education.
Planned Parenthood Federation of America (PPFA) and Planned Parenthood Action Fund (PPAF) seek a strategic Deputy Chief Information Security Officer who will report to the Chief Information Officer. This leadership role will oversee the Information Security (InfoSec) department, includes core capabilities for InfoSec Architecture & Engineering, InfoSec Operations, and HIPAA, Risk & Compliance. The Deputy CISO is responsible for managing the end-to-end information security management program to ensure that PPFA  information assets are adequately protected. 
Purpose:
●To continuously improve our information security practices based on the evolving threat landscape, focused on protecting the organization from active direct threats as well as compliance and regulatory risk. The Planned Parenthood information security program is based on a  philosophy that is not only focused on today’s needs, but will continue to be relevant in meeting the needs of the future. It is about developing a mode for us to safely and securely interact and protect our patients' and constituents’ information anywhere and at any time.●The Deputy CISO position requires a leader with an operational excellence mindset while strategically staying on top of the latest tech security trends.●Must have a sound business acumen to help identify, evaluate and report information security risks in a manner that supports the risk posture of the organization. ●The Deputy CISO will partner with Affiliate Tech Services and proactively work with affiliated entities across the Planned  Parenthood family to implement practices that meet defined policies and standards for information security. ●This role will collaborate to share program best practices with peer nonprofits with an eye on further strengthening and evolving the program for Planned  Parenthood. ●The Deputy CISO serves as the process owner of all assurance activities related to the availability,  integrity and confidentiality of customer, business partner, employee, and business information in compliance with the organization's information security policies. ●The Deputy CISO must be highly knowledgeable about the business environment and ensure that information systems are maintained in a fully functional, secure mode. 
Delivery:
The ideal candidate is a senior leader and subject matter expert in information security, possessing outstanding strategic and operational skills to successfully deliver all InfoSec accountabilities. This leader is a consensus builder and an integrator of people, platforms, and processes aligned with the customer and business needs. While the Deputy CISO is the leader of the security program, he or she must also be able to coordinate disparate drivers,  constraints, and personalities, while maintaining objectivity and a strong understanding that security is just one of many critical strategic needs for the organization. Ultimately, the Deputy CISO is a business leader and should have a track record of competency in the field of information security or risk management, with eight to 10 years of relevant experience, including four years in a significant leadership role. The Deputy CISO will:  ●Oversee and mature Cybersecurity Centers of Excellence: Network Protection, Data Protection, Endpoint Protection, SOC  Monitoring, Incident Response, Threat and Vulnerability Management, Secure System Development Lifecycle, Security Engineering, Information Security Architecture, Insider Threat Management, and Security Awareness. ●Provide direction and leadership to InfoSec LT to enhance and maintain the Capability Maturity Model and Direct Risk Model based on the above-mentioned Centers of Exce