VP, Chief Information Security Officer (AI/Cybersecurity)

Location: Beth Israel Deaconess Medical Center, United States of America

Annual base salary: $315,000–$350,000 USD, with possible performance-based incentive bonuses.

Company

hirify.global is a healthcare organization supporting clinical care, research, administrative operations, and connected healthcare technology.

What you will do

• Set the mission, strategy, operating model, roadmap, investments, policies, standards, and performance measures for the enterprise Cyber Security function.
• Lead security architecture and engineering, identity and access management, security operations, vulnerability management, governance, risk and compliance, third-party risk, incident response, and workforce education.
• Oversee threat intelligence, threat hunting, digital forensics, crisis coordination, ransomware preparedness, business continuity, disaster recovery, clinical downtime readiness, and post-incident improvements.
• Protect cloud, SaaS, endpoint, email, network, application, API, data, EHR, ERP, digital health, connected medical device, Internet of Medical Things, and operational technology environments through identity-first and zero-trust practices.
• Co-lead AI governance, establish security requirements across the AI lifecycle, maintain AI risk oversight, address AI-enabled threats, and drive the use of AI to combat security threats.
• Advise executive leadership and board committees on material cyber risk and partner with Privacy, Compliance, Legal, Risk, Internal Audit, Clinical, Research, Data and Analytics, Clinical Engineering, Supply Chain, Human Resources, and other leaders.

Requirements

• Master’s degree in Cyber Security, Computer Science, Information Systems, Engineering, Business, Healthcare Administration, or a related field, and/or an equivalent combination of education and progressively responsible experience.
• 15 or more years of progressively responsible experience in cybersecurity, information security, technology risk, or a related field.
• 7 or more years of leadership responsibility in complex environments, including advising executive leadership and governing bodies on material cyber risk.
• Demonstrated experience in enterprise cybersecurity strategy, governance, risk management, incident response, resilience, security architecture, cloud and identity security, third-party risk, organizational design, financial planning, and executive communication.
• Deep knowledge of cybersecurity, including AI and generative AI security risks, AI governance, cloud and SaaS security, zero-trust architecture, security operations, data protection, application and API security, connected medical device security, and cyber resilience.
• Strict adherence to BILH confidentiality, policies, Standards of Behavior, Guiding Principles, departmental expectations, mandatory education, and quality improvement requirements.
• Maintain courteous and effective interactions with colleagues and patients and perform other duties required by the department.

Nice to have

• Healthcare experience.
• Relevant credentials such as CISSP, CISM, C-CISO, CRISC, HCISPP, GIAC, or a comparable security or executive credential.
• Knowledge of HIPAA/HITECH, the NIST Cybersecurity Framework, HHS healthcare cybersecurity guidance, the NIST AI Risk Management Framework, and applicable industry standards.
• Proven capability leading cybersecurity and risk initiatives in complex and dynamic environments.
• Leadership competencies in coaching and developing others, driving results, emotional intelligence, leading change, systems thinking, and healthcare business strategy.

Culture & Benefits

• Full-time employment within a healthcare organization focused on patient, colleague, and community protection.
• Responsibility for building an enterprise security culture and developing capabilities in cloud, identity, AI security, medical device security, incident response, and healthcare cyber risk.
• Staff are required to be vaccinated against influenza as a condition of employment.
• Equal opportunity employer, including veterans and people with disabilities.