Chief Information Security Officer (CISO)

Position Responsibilities may include, but not limited to

Cybersecurity Leadership & Governance 

• Develop and execute the enterprise cybersecurity strategy and multi-year security roadmap
• Establish and maintain information security policies, standards, procedures, and governance frameworks
• Lead cybersecurity risk management, security operations, threat detection, vulnerability management, and security monitoring programs
• Ensure proactive defense against cyber threats and continuously improve the organization's security posture
• Provide regular cybersecurity updates, risk assessments, and strategic recommendations to executive leadership
• Lead enterprise-wide cybersecurity awareness and training programs
• Partner with business and technology leaders to ensure security is integrated into all strategic initiatives and technology investments

 

Information Security, Risk Management & Compliance 

• Ensure compliance with HIPAA, HITRUST, NIST, PCI-DSS, SOC, and other applicable regulatory and security frameworks
• Partner with Legal, Compliance, Internal Audit, and Privacy functions to manage regulatory obligations and enterprise risk
• Oversee security audits, risk assessments, penetration testing, control validation, and remediation activities
• Maintain policies and controls that protect PHI, PII, confidential company information, and critical business systems
• Lead third-party security reviews, vendor risk assessments, and cybersecurity due diligence efforts
• Develop and implement enterprise risk management processes related to cybersecurity and technology operations
• Monitor emerging regulatory requirements and industry best practices to ensure ongoing compliance and program maturity

 

Infrastructure, Cloud & Platform Operations 

• Own the enterprise infrastructure strategy across Microsoft Azure cloud services, networking, endpoint computing, identity management, collaboration platforms, and enterprise technology systems
• Establish standards for reliability, scalability, security, performance, and operational excellence across all technology platforms
• Lead Azure architecture, cloud governance, infrastructure engineering, automation, platform modernization, and technology lifecycle management initiatives
• Ensure Azure-based services and supporting infrastructure align with business growth objectives, security requirements, and operational expectations
• Oversee Microsoft cloud technologies including Azure, Microsoft 365, Entra ID, Intune, Microsoft Defender, and related security and productivity platforms
• Drive platform standardization, cloud optimization, infrastructure resiliency, and cost management initiatives
• Ensure enterprise infrastructure supports cybersecurity, compliance, operational continuity, and disaster recovery requirements
• Establish infrastructure roadmaps that improve reliability, simplify operations, and reduce technology risk

 

IT Operations & End User Support 

• Lead enterprise service management, technical support, help desk operations, and end-user computing services
• Establish service delivery standards, operational KPIs, and customer experience programs that support business productivity
• Drive continuous improvement initiatives that enhance service quality, response times, and user satisfaction
• Ensure appropriate operational processes, controls, and documentation are maintained across all support services
• Develop scalable support models that effectively serve corporate, operational, remote, and field-based employees
• Foster a culture of customer service excellence, accountability, and continuous improvement within the IT organization
• Implement modern service management practices utilizing automation, self-service capabilities, and process optimization

 

IT/Technical Business Continuity, Disaster Recovery & Operational Resilience 

• Own the strategy, governance, and execution of enterprise IT/Technical Business Continuity Planning (BCP) and Disaster Recovery (DR) programs
• Develop, implement, and maintain technology continuity and recovery strategies that safeguard critical business operations and member services
• Establish and govern Recovery Time Objectives (RTOs), Recovery Point Objectives (RPOs), service availability standards, and resilience requirements for all critical technology systems
• Lead disaster recovery planning and recovery strategy development for Microsoft Azure cloud environments, enterprise applications, infrastructure platforms, data services, and networking environments
• Oversee regular disaster recovery testing, technical business continuity exercises, tabletop simulations, failover testing, and recovery validation activities
• Partner with business leaders to ensure technology continuity plans align with enterprise operational continuity requirements
• Develop technology crisis management procedures supporting cybersecurity incidents, cloud service interruptions, infrastructure failures, and operational emergencies
• Ensure resilience, redundancy, backup, recovery, and failover capabilities are designed into all critical Azure and enterprise technology platforms
• Provide executive reporting on continuity readiness, recovery capabilities, testing outcomes, identified risks, and remediation plans

 

Security Operations & Incident Response 

• Lead enterprise incident response, cyber crisis management, and major technology incident response activities
• Establish and maintain security monitoring, detection, investigation, containment, and response capabilities
• Coordinate internal teams, managed security partners, and external stakeholders during cybersecurity incidents
• Ensure timely containment, remediation, communication, and post-incident review processes
• Develop executive reporting and lessons-learned programs following security events and operational incidents
• Collaborate closely with infrastructure and cloud operations teams to ensure incident response, recovery, and resilience capabilities are integrated across Azure and enterprise technology environments
• Continuously improve the organization's cyber defense capabilities through threat intelligence, automation, and operational maturity initiatives

 

Financial Management & Strategic Vendor Partnerships 

• Develop and manage security, infrastructure, cloud, and support operating and capital budgets
• Create business cases and investment strategies supporting technology modernization, security improvements, and infrastructure enhancements
• Establish strong relationships with strategic technology vendors, managed service providers, and cybersecurity partners
• Negotiate contracts, service agreements, and licensing arrangements to maximize business value
• Drive operational efficiencies and cost optimization while maintaining required service levels and security standards
• Monitor vendor performance and ensure contractual obligations are met

 

Leadership, Talent Development & Organizational Effectiveness 

• Build, lead, and develop high-performing teams across cybersecurity, infrastructure, cloud operations, technical support, and IT operations
• Establish clear performance expectations, career development pathways, succession planning, and leadership development programs
• Foster a culture of accountability, collaboration, innovation, security-first thinking, and operational excellence
• Mentor and develop future technology leaders within the organization
• Partner with executive leadership to align technology capabilities with strategic business priorities
• Champion organizational change management and continuous improvement initiatives throughout the technology organization

 

Required Skills and Experience

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related field
• 12+ years’ progressive technology leadership experience
• 5+ years’ leadership experience managing cybersecurity, infrastructure, cloud, and/or technology operations teams
• Demonstrated experience leading enterprise cybersecurity programs and technology risk management initiatives
• Strong experience managing Microsoft Azure cloud environments and Microsoft enterprise technologies
• Deep knowledge of cybersecurity frameworks, governance practices, risk management methodologies, and regulatory compliance requirements
• Experience leading incident response, crisis management, IT/technical business continuity, and disaster recovery programs
• Proven ability to influence executive stakeholders and drive enterprise-wide technology initiatives
• Strong financial management, strategic planning, and organizational leadership capabilities

Preferred Skills and Experience

• Experience within healthcare, food manufacturing, supply chain, logistics, or other highly regulated industries
• Experience with HIPAA, HITRUST, NIST Cybersecurity Framework, Microsoft Security solutions, and cloud security best practices
• Demonstrated success leading enterprise cloud transformations and cybersecurity maturity initiatives

 

Physical Requirements

Repetitive motions that include the wrists, hands and/or fingers
Sedentary work that primarily involves sitting, remaining in a stationary position for prolonged periods
Visual perception to perform job including peripheral vision, depth perception, and the ability to adjust focus