Job Description
Directs the cybersecurity function including developing and executing the organizations information security strategy. With the Chief Information Security Officer (CISO), responsible for safeguarding the organizations information assets from unauthorized access, disclosure, disruption, modification, or destruction. Shapes and implements cybersecurity strategies, oversees aspects of the cybersecurity function, and ensures protection of the organization against cyber threats.
Job Responsibility
'1.With the CISO, leads the cybersecurity function by developing, implementing, and maintaining the organizations information security strategy and program in alignment with Northwells strategy and objectives.
2.Develops and articulates a long-term (1+ years) strategic vision for areas of responsibility.
3.Works with the CISO to identify and assess information security risks and develop risk management strategies. Monitors the threat landscape and emerging security trends to proactively identify and mitigate risks.
4.Collaborates with various functional areas and business units to ensure alignment of security initiatives with business objectives and ensures integration into Northwells operations. Articulates the need, value, and impact of cybersecurity and serves as an advocate and champion for cybersecurity efforts.
5.Provides strategic guidance and advocacy regarding the prioritization of investments that impact information security. Represents the cybersecurity function in meetings and presentations with senior management and external stakeholders.
6.Drives the development and evolution of cybersecurity governance and associated processes to ensure timely, data-driven, and risk-mitigating decision-making.
7.Assists the CISO in the development and maintenance of security policies, standards, and procedures to meet compliance requirements.
8.Oversees and conducts regular security audits and assessments to ensure adherence with security frameworks, regulatory requirements, and industry standards, and ensure timely resolution of identified vulnerabilities. Ensures compliance with relevant cybersecurity regulations across Northwell's for-profit entities.
9.Advises senior leadership on complex issues requiring advanced knowledge of risk management, threat modeling, and disaster recovery planning, which may have long-term impacts.
10.Coordinates the successful completion of interdepartmental information security projects with resources from other departments and external service providers.
11.Develops and maintains security KPIs/metrics and reporting to track the effectiveness of the security program.
12.Develops and oversees operational and capital budgets.
13.Identifies continuous improvement opportunities including enhancements, automation/AI, new features, streamlining workflows, and collaborating with stakeholders to improve and mature the cybersecurity function.
14.Exercises wide latitude of authority in determining objectives and approaches to critical assignments.
15.Assists in career development planning for team members.
16.Responsible for directing staffing appropriately for departments and collaborating with HR to fulfill requirements. Ensures teams are continuously trained and upskilled to meet future needs.
17.Provides guidance and direction to managers as appropriate.
18.Performs related duties as required. All responsibilities noted here are considered essential functions of the job under the Americans with Disabilities Act. Duties not mentioned here, but considered related are not essential functions.
Job Qualification
Master's Degree required, or equivalent combination of education and related experience.
10-12 years of relevant experience and 7+ years of leadership / management experience, required.
*Additional Salary Detail
The salary range and/or hourly rate listed is a good faith determination of potential base compensation that may be offered to a successful applicant for this position at the time of this job advertisement and may be modified in the future.When determining a team member's base salary and/or rate, several factors may be considered as applicable (e.g., location, specialty, service line, years of relevant experience, education, credentials, negotiated contracts, budget and internal equity).
