Director of Cybersecurity

• Develop and implement a proactive and robust cybersecurity strategy aligned with organizational goals and best practices and regulatory standards.

• Oversee all aspects of our health system's cybersecurity program in coordination with the Compliance and Legal departments, including policy development, risk assessments, incident response, threat intelligence, cyber security education and training, and vulnerability management.

• Stay up to date with the latest cybersecurity threats, trends, and technologies, and integrate knowledge into the development and maintenance of effective security measures.

• Collaborate with cross-functional teams, including IT, legal, compliance, and operations, to ensure cybersecurity objectives are aligned with broader organizational objectives.

• Provide executive-level guidance and recommendations on cybersecurity matters to the senior leadership team and the Board of Directors, when appropriate.

• Establish and maintain strong relationships with internal stakeholders, external partners, vendors, and government entities to foster a culture of cooperation and advance cybersecurity initiatives.

• Lead and mentor a team of cybersecurity professionals, providing guidance and development opportunities to foster their growth and ensure the operational effectiveness of the department.

• Conduct regular audits and assessments of cybersecurity controls, identify vulnerabilities, and implement remediation measures to enhance the overall security posture.

• Collaborate with relevant regulatory and privacy bodies to ensure compliance with industry-specific cybersecurity regulations, such as HIPAA and HITECH, and Personally Identifiable Information standards, and consumer protection requirements in all markets.

• Develop and conduct ongoing cybersecurity awareness and training programs for employees to promote cybersecurity best practices and risk mitigation.

• Work with Compliance and Legal to develop clear documentation and education regarding compliance standards applied to all cyber security and technology-based systems, to ensure that all company programs are operating in a compliant manner.

• Review all existing and potential contracts involving the access of Rogers systems, or the sharing of PII or PHI or confidential business information through electronic methods.

• Support litigation efforts related to production and explanation of cyber security methods and programs.

Additional Job Description:

• Demonstrated ability to effectively communicate complex cybersecurity concepts to non-technical stakeholders.

• Strong analytical, problem-solving, and decision-making capabilities.

• Excellent leadership and managerial skills, with a demonstrated ability to build and inspire high-performing teams.

• Experience collaborating with external entities, such as law enforcement agencies, regulatory bodies, and industry partners.

• Strong understanding of current cyber threats, attack vectors, and emerging trends in the cybersecurity landscape.

• 10+ years of extensive experience in leadership positions within the field of cybersecurity, preferably within a healthcare or similarly regulated industry; including hands-on experience in cybersecurity operations, including incident response, threat detection, SOC management, and/or security engineering

• A self-directed leader with a proven history of taking ownership, driving risk-reduction initiatives without external prompting

• In-depth knowledge of cybersecurity principles, frameworks, standards, and regulations (e.g., NIST Cybersecurity Framework, ISO 27001, HIPAA, etc.).

• Proven track record of developing and implementing successful cybersecurity strategies, programs, and initiatives,

• Relevant certifications such as CISSP, CISM, or CRISC are highly desirable.

• Bachelor's degree in a relevant field, such as cybersecurity, computer science, or information systems.

With a career at Rogers, you can look forward to a Total Rewards package of benefits, including:

• Health, dental, and vision insurance coverage for you and your family
• 401(k) retirement plan
• Employee share program
• Life/disability insurance
• Flex spending accounts
• Tuition reimbursement
• Health and wellness program
• Employee assistance program (EAP)

Through UnitedHealthcare, UMR and HealthSCOPE Benefits creates and publishes the Machine-Readable Files on behalf of Rogers Behavioral Health. To link to the Machine-Readable Files, please visit Transparency in Coverage (uhc.com)