Director of Information Security

Director of Information Security (DIS)

Direct Hire

Hybrid - 3 days onsite/2 days remote

Location - Nashville, TN

Responsibilities

• The Director of Information Security (DIS) is vital in safeguarding my clients information assets
• The DIS will establish and execute a comprehensive cybersecurity strategy, safeguard sensitive patient data, and ensure compliance with health industry regulations and standards
• Establish and drive my clients long-term security vision, ensuring alignment with frameworks like the NIST 800.53 CSF and HITRUST CSF
• Craft, maintain, and revise security policies, procedures, standards, and guidelines
• Design, maintain, and periodically test a comprehensive incident response plan, ensuring rapid containment and mitigation of security threats
• Develop and execute a rigorous vendor risk assessment process, ensuring that external partners adhere to my clients security standards and contractual obligations

REQUIREMENTS

• 8+ years in the domain of information security with significant leadership stints
• Proven record in leading and cultivating security teams
• Prior experience in managing security incidents and conducting incident response in a healthcare setting
• Deep knowledge of HIPAA regulations, healthcare compliance requirements, and healthcare industry best practices
• Proficiency with NIST CSF 800.53 and HITRUST Framework