Director, Cyber Security Risk Management, Infrastructure Protection

Community Health Systems is one of the nation's leading healthcare providers. Developing and operating healthcare delivery systems in 35 distinct markets across 14 states, CHS is committed to helping people get well and live healthier. CHS operates 70 affiliated hospitals with more than 10,000 beds and approximately 1,000 other sites of care, including physician practices, urgent care centers, freestanding emergency departments, imaging centers, cancer centers, and ambulatory surgery centers.

As a member of the Cybersecurity organization, the Cyber Security Director, Infrastructure Protection leads the strategy, implementation and continuous improvement of critical cybersecurity programs, ensuring the successful delivery and operations of infrastructure security controls and processes across the CHS Enterprise. The Director is responsible for leading, managing, and developing a team of cybersecurity managers and professionals driving the success of critical initiatives and programs. This role collaborates with Cyber Architecture, IT and other stakeholders to assess risks, define strategies, and deliver business and functional requirements and applicable use-cases of focus areas in order to implement and govern processes and controls that reduce risk and exposure to the organization.  The Director will foster strong partnerships with business leaders to ensure that strategies and frameworks align with organizational goals, programs, and projects.  By providing insights into emerging threats and technologies, the Director promotes innovation and enhances the overall security posture of the organization.

The Infrastructure Protection department within the Cybersecurity Risk Management (CSRM) organization ensures successful delivery and operations of critical security controls across the CSH Enterprise related to Network Protection, Endpoint Protection and Cloud Security. The Director, Infrastructure Protection  leads all facets of the program. The role has responsibility for the overall strategic direction of the program, including the people, processes and technologies involved. The role includes oversight of planning, build, implementation, and operation of the underlying technology platforms and processes across the infrastructure spectrum, including: Network Firewalls, Web Filtering, Network Segmentation, Network Access Control, Anti-Malware Protection, Endpoint Detection and Response, Host Firewall, Application Allow Listing, Mobile Device Security, Medical Device Security, Endpoint Device Encryption, Cloud Security Posture Management, Workload Protections, and Cloud Security Governance.

The Director, Infrastructure Protection reports directly to the VP, Chief Information Security Officer and is a member of the Senior Cybers Security Leadership Team. 

Essential Duties and Responsibilities 

• Leadership & Oversight

  • Lead the planning, development, and strategic implementation of multiple cybersecurity programs across the organization.

  • Oversee and guide a team of managers and engineers, ensuring leadership in mentorship, performance management, and fostering a high-performance culture.

  • Collaborate with cross-functional leaders, ensuring cybersecurity strategies align with business objectives and regulatory requirements at a broader level.

• Risk Management & Program Development

  • Direct organization-wide risk assessments, overseeing the identification and management of cybersecurity risks across all systems and data environments.

  • Present risk mitigation strategies to senior leadership, including measurable metrics that demonstrate program effectiveness and security posture improvements.

  • Lead initiatives to optimize cybersecurity processes, driving organization-wide improvements in efficiency and effectiveness.

• Collaboration & Strategic Alignment

  • Serve as a key advisor across the organization, aligning security programs with operational needs and strategic business goals.

  • Develop and manage cross-departmental relationships to ensure cybersecurity capabilities evolve to meet both current and future business requirements.

  • Partner cl