Position Summary:
The Director of Cybersecurity oversees daily operations of the Cybersecurity program, including Incident Response and the Security Operations Center (SOC). This position will work with senior management across all functions both globally and within the Enterprise in creating and delivering the vision and strategy for information security. The position will be required to establish productive and mutually beneficial relationships with stakeholders at all levels of the Operations and Clinical groups in the Enterprise. Directs teams of Cybersecurity Analysts responsible for the daily operational activities associated with Cybersecurity program. Advise the Chief Information Security Officer (CISO) regarding relevant security risks and threats, ensure that threats are detected and addressed as early as possible, and address information security incidents in a timely fashion. Participates in budgeting and the development of strategic and tactical plans required for the implementation and maintenance of the MultiCare Information Security Program. The Director of Cybersecurity reports to the CISO. The Director of Cybersecurity will be responsible for enterprise cybersecurity incident response, vulnerability management, cyber treat intelligence, staff training, as well as contributing to policy and procedure drafting, review and socialization.

Minimum Requirements:
10 years of information technology experience
8 years of direct IT Security experience in one or more of the 10 Security domains
6 Years of Information Security Experience in cybersecurity, incident response, and security operations
Demonstrated experience in information security principles, control frameworks and governance models.
5 years of experience in a managerial or supervisory capacity
Extensive experience managing information security and risk management in a complex technical environment including industry accepted risk assessment frameworks (NIST SP 800-30/37 and NIST SP 800-53)

Education/Licenses/Certifications:
Bachelor's degree in MIS, IT, Information Security or other related field; depth of experience in lieu of degree will be considered
Master’s Degree in IT, Information Security or related field preferred
One or more of the following certifications required:
Certified Information Systems Security Professional – CISSP
Healthcare Information Security and Privacy Practitioner – HCISSP
Certified Information Security Manager - CISM

Position Type: Full-Time Regular
Full Time Employee: Yes
Primary Shift: Day
Work Schedule: Day