Primary Location:

Address:

Shift:

Job Description Summary:

Job Description:

Position Summary and Purpose
The System Director Information Security reports to the CIO is a member of the IS leadership team and works closely with leadership across the organization. The AVP Information Security is an advocate for the organizations total Information Security needs and is responsible for the development and delivery of a comprehensive information security strategy to optimize the security posture of ULH & BCC. The System Director Information Security leads the development and implementation of a security program that leverages collaborations facilitates information security governance advises leadership on security direction and resource investments supports design of appropriate policies to manage information security risk and serves as the organizations HIPAA Security Official. The complexity of this position requires a leadership approach that is engaging imaginative and collaborative with the ability to work with other leaders to set the best balance between security strategies and other organizational priorities.
Essential Functions:
Manages the daily operation and implementation of the IT security strategy including governance business continuity and disaster recovery vulnerability and incident management cybersecurity risk management security operations identity and access management physical security and security compliance
Conducts continuous assessment of IT security practices and systems to identify areas for risk noncompliance and improvement
Communicates digital programs and strategies to stakeholders; reviews analyzes and delivers data information to stakeholders
Oversees security assessments and risk analyses delivers new security technology approaches and next generation solutions and develops strategies and solutions to minimize the risk of cyberattacks
Ensures compliance and governance of programs
Manages the IT security budget; communicate to staff and appropriate parties
Communicate cybersecurity risk to the organizations leadership
Other Functions:
Maintains compliance with all company policies procedures and standards of conduct
Complies with HIPAA privacy and security requirements to maintain confidentiality at all times
Performs other duties as assigned

Additional Job Description:

Job Requirements
(Education Experience Licensure and Certification)
Education:

Bachelors degree in an Information Technology-related field or equivalent relevant experience (required)
Masters Degree in an Information Technology-related field (preferred)

Experience:
15 years of professional experience in technical environments (required)

Certification:
Certified Information Systems Security Professional (CISPP) certifications or other industry-related certification (preferred)

Job Competency:
Knowledge Skills and Abilities critical to this role:

Strong working knowledge of theory and practice within a specialized IT/IS field
Exemplifies service excellence responsive informs constituents of process pleasant to work with educates and provides timely accurate information
Displays strong organizational skills manages time effectively keeps tasks appropriately prioritized and delegates appropriately; works proactively- anticipates and plans for problems before they arise; is able to perform work in a neat efficient well-coordinated well communicated manner with a high degree of accuracy and professionalism
Role models strong work ethic motivated diligent industrious and persistent in the workplace stays on tasks to completion works at a fast pace to ensure optimal efficiency; remains flexible ability to change directions as needed to ensure optimal outcomes
Displays strong interpersonal skills can build effective strong working relationships with employees colleagues management and vendors through trust communication and credibility; displays self-awareness and emotional intelligence exercises sound judgement
Displays strong leadership skills ability to work collaboratively with others serve others help others lead others mentor others and take directions from others in the interest of moving process and programs forward to the desired outcome

Language Ability:
Must be able to communicate effectively in both verbal and written formats

Reasoning Ability:
Ability to break down problems or tasks; scanning ones own knowledge and experience to identify causes and consequences of events

Computer Skills:
Proficient in Microsoft Office Suite (Word Excel Outlook)
Additional Responsibilities:
Demonstrates a commitment to service organization values and professionalism through appropriate conduct and demeanor at all times
Maintains confidentiality and protects sensitive data at all times
Adheres to organizational and department specific safety standards and guidelines
Works collaboratively and supports efforts of team members
Demonstrates exceptional customer service and interacts effectively with physicians patients residents visitors staff and the broader health care community

UofL Health Core Expectation:
At UofL Health we expect all our employees to live the values of honesty integrity and compassion and demonstrate these values in their interactions with others and as they deliver excellent patient care by:
Honoring and caring for the dignity of all persons in mind body and spirit
Ensuring the highest quality of care for those we serve
Working together as a team to achieve our goals
Improving continuously by listening and asking for and responding to feedback
Seeking new and better ways to meet the needs of those we serve
Using our resources wisely
Understanding how each of our roles contributes to the success of UofL Health