VP, Cybersecurity

It is an exciting time to be part of the PatientPoint team! As the clear leader in the point-of-care industry, we offer an ideal, people-focused place to innovate, positively impact patient education and doctor-patient connections, and be inspired to build a great career. 

Location: Chicago or Cincinnati

Hybrid Schedule: 3 days in office / 2 days at home weekly

Job Summary

Maintain Cybersecurity Roadmap: 

• Conduct a regular and thorough assessment of current security posture.
• Identify long-term goals and prioritize initiatives accordingly.
• Ensure alignment with business objectives and regulatory requirements.
• Continuously update the roadmap to adapt to evolving threats and technologies.

Maintaining Awareness of Trends: 

• Stay informed about emerging threats, industry best practices, and regulatory changes.
• Share insights with the team and translate them into actionable strategies.
• Foster a culture of continuous learning and professional development.

Providing Leadership and Hands-On Support: 

• Lead by example and be willing to dive into technical challenges when necessary.
• Provide guidance and mentorship to team members.
• Stay involved in key projects and initiatives to ensure success.

Incident Response and Recovery: 

• In collaboration with technology teams, develop robust security incident response and recovery plans.
• Conduct regular drills and exercises to test the effectiveness of plans.
• Coordinate with legal and compliance teams to ensure appropriate reporting and documentation.

Security Incident Reporting and Metrics: 

• Define clear expectations for tracking and reporting security incidents.
• Establish metrics to measure the effectiveness of security measures and incident response activities.
• Use data-driven insights to continuously improve security posture.

Providing Technical Leadership in Security Architecture: 

• Collaborate with technology teams to ensure that security considerations are integrated into the design and implementation of all applications, systems and networks.
• Act as a subject matter expert in security architecture discussions and provide recommendations based on industry standards and organizational requirements.

Ensuring Compliance: 

• Stay up-to-date on relevant regulations and standards.
• Work closely with legal and compliance teams to ensure adherence to requirements.
• Work with relevant teams to implement controls and processes to demonstrate

Vendor and Partner Risk Management: 

• Establish criteria for assessing vendor security practices.
• Monitor and evaluate third-party security posture regularly.
• Implement protocols for addressing and mitigating vendor-related risks.

Budget Management: 

• Develop a comprehensive budget that aligns with strategic priorities.
• Monitor spending and adjust allocations as needed.
• Advocate for additional resources when necessary to address emerging threats.

Collaboration and Integration: 

• Foster strong partnerships across departments to integrate security into all aspects of business operations.
• Collaborate with technology teams to design and implement secure systems and networks.
• Ensure that security considerations are incorporated into all projects and initiatives from the outset.

Threat Intelligence and Vulnerability Management: 

• Develop strategies for gathering and analyzing threat intelligence.
• Continue to implement robust vulnerability management processes to identify and remediate security vulnerabilities.
• Stay informed about emerging threats and vulnerabilities and take proactive measures to mitigate risks.

Communication with IT Leadership: 

• Regularly communicate with Technology leadership and provide updates on cybersecurity risks and incidents.
• Prepare and present relevant reports and updates to senior leaders.
• Ensure that cybersecurity considerations are integrated into strategic decision-making processes.

Product owner and Project Management 

• Work with your team, PMO to maintain Agile based product backlog of features, tasks and other work required of the team.

Risk Management an