• Must be willing to work onsite in Knoxville, TN.
• Relocation Assistance is available.

Director of Cybersecurity

Position Accountabilities and Performance Criteria:
Leadership and Team Management

• Leadership: Direct and provide leadership to all cybersecurity staff, including Security Analysts, Incident Responders, and Compliance Specialists.
• Change Agent: Support and lead the efforts to change team cultures, dynamics, processes, and technologies that provide modern solutions to the organization.
• Team Management: Lead cybersecurity team to ensure performance management and career development. Provide technical leadership and direction, delegate responsibilities appropriately, and identify management development opportunities. Works closely with other leaders throughout IT and the organization to educate, inform, and assist their understanding and acceptance of Cybersecurity efforts and controls.
• Staff Development: Provide leadership, development, coaching, and guidance to ensure the appropriate departmental developmental goals are set and achieved
• Ongoing Continuous Development: Champion innovative efforts and stay abreast of leading-edge solutions for recruitment, development, and retention of the cybersecurity workforce

Cybersecurity Operations

• Operations Oversight: Oversee the day-to-day operations of cybersecurity measures, including monitoring, detection, and response to security incidents.
• Incident Response: Lead the incident response team in managing and resolving security breaches and incidents
• Compliance: Ensure compliance with HIPAA and other relevant regulations and standards.
• Technical Implementation: Lead technical implementation projects related to cybersecurity, creating plans and strategies to meet the needs of the organization.
• Continuous Improvement: Stay informed about emerging technologies and industry trends, making recommendations for improvement.

Strategic Planning and Implementation

• Strategic Planning: Develop and maintain strategic cybersecurity roadmaps, provide tactical action plans, and ensure optimum planning of cybersecurity projects and resources.
• Resource Planning: Conduct proactive resource planning based on anticipated demand.
• Milestone Establishment: Establish deliverables and projected milestones for solution delivery in partnership with business leaders and Senior Executives.
• Technical Roadmap: Lead the development of cybersecurity strategies and technical roadmap, ensuring integration with overall IT and organizational strategies.

Vendor and Budget Management

• Vendor Management: Manage relationships with cybersecurity vendors, ensuring that contracts and agreements are in place and that vendor performance meets organizational standards.
• Budget Management: Develop annual operating budgets and long-term capital budgets for cybersecurity projects.

Operational Efficiency

• Performance Monitoring: Monitor network and systems performance, ensuring availability and reliability. Perform capacity planning.
• Service Management: Oversee operational and service management processes to ensure performance of all technology subcontractors.

Collaboration and Relationship Building

• Collaboration: Collaborate with other IT teams and clinical IT teams to ensure alignment and integration of cybersecurity services within the health system.
• Relationship Building: Develop relationships with key business leaders to identify service gaps and propose solutions. Maintain credibility with key individuals at hospitals and corporate offices, along with Legal, HR, and Privacy/Compliance.

Security Awareness and Training Programs

• Training Programs: Develop and implement security awareness and training programs for employees to ensure they understand and adhere to cybersecurity policies and procedures.

Third-Party Risk Management

• Risk Management: Oversee the assessment and management of cybersecurity risks associated with third-party vendors, partners, and bio-medical devices.

Policy Development and Enforcement

• Policy Development: Develop, implement, and enforce cybersecurity policies, standards, and procedures to ensure compliance with regulatory requirements and industry best practices.

Security Architecture and Design

• Architecture and Design: Lead the design and implementation of secure network architectures and systems to protect sensitive data and ensure the integrity of IT infrastructure.

Incident Management and Forensics

• Incident Management: Oversee incident management and forensic investigations to identify root causes, mitigate risks, and prevent future incidents.

Regulatory Compliance

• Regulatory Compliance: Ensure compliance with relevant regulations such as HIPAA, HITECH, and other healthcare-specific cybersecurity requirements.

Business Continuity and Disaster Recovery

• Continuity and Recovery: Develop and maintain business continuity and disaster recovery plans to ensure the organization can quickly recover from cybersecurity incidents.
• Local travel required.
• Follows policies, procedures, and safety standards. Completes required education assignments annually. Works toward achieving goals and objectives and participates in quality improvement initiatives as requested.
• Performs other duties as assigned.

Position Qualifications:

• Minimum Education: None specified; will accept any combination of formal education and/or prior work experience sufficient to demonstrate possession of the knowledge, skill, and ability needed to perform the essential tasks of the job, typically such as would be equivalent to a Bachelor’s degree.
• Preference may be given to individuals possessing a bachelor’s degree in Cybersecurity, Information Technology, or a directly related field from an accredited college or university.

Minimum Experience:

• A minimum of Ten (10) years of leadership experience in technology/IT, with Seven (7) years leading cybersecurity within an enterprise-sized organization, is required.

Licensure Requirement:

• Employee must have a valid Tennessee driver’s license and state-mandated minimum insurance coverage. Driving record must meet client minimum standards at the date of hire and throughout employment tenure.