Job ID: 949926
Facility: Vidant Health
Location: Greenville, NC
Date Posted: Apr 6, 2021
About Vidant Health
Vidant Health, located in eastern North Carolina, is a comprehensive health system that is made up of 9 hospitals that serve 1.4 million people in 29 counties. Vidant Health includes Vidant Medical Center, community hospitals, physician practices and partners that collaborate with Vidant Health to enhance the quality of life of our patients.
Information Services at Vidant Health
Vidant Health offers comprehensive Information Technology (IT) services and infrastructure to support and enable all aspects of organizational operations. Our IT division consists of a state-of-the-art data center located in Greenville, NC. The data center services all information technology needs of Vidant Health facilities. All Vidant Health owned or leased hospitals are on a common IT platform, including our electronic health record (EHR) that uses Epic's suite of applications. Vidant Health has achieved Meaningful Use Stage 2 recognition and is also approaching Stage 7 for HIMSS Analytics’ Electronic Medical Records Adoption Model (EMRAM) recognition.
Develops strategic direction and leads teams of cybersecurity professionals that plan and design security solutions and capabilities that enable the organization to identify, protect, detect, respond, and recover from cyber threats and vulnerabilities. Defines and develops security requirements using risk assessments, threat modeling, testing, and analysis of existing systems. Develops security integration plans to protect existing infrastructure and to incorporate future solutions. Designs action plans for policy creation and governance, system hardening, monitoring, incident response, disaster recovery, and emerging cybersecurity threats. Utilizes a variety of security information and event management (SEIM), data loss prevention (DLP), intrusion prevention systems (IPS), and other tools in designs. Partners with stakeholders to encourage the adoption of security-compatible software designs and best practices. Keeps abreast of the latest intelligence from law enforcement and other sources of cyber threat information and briefs stakeholders with actionable information. Typically requires a bachelor's degree in computer science or engineering or equivalent. Requires security certifications such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM). Reports to VP, Chief Information Security Officer and serves as needed in the capacity of Deputy CISO when the CISO is unavailable or as directed.Position is the senior most position under the CISO and must be willing, able and qualified to serve in the capacity of interim or deputy CISO as required. Creates functional strategies and specific objectives for the sub-function and develops budgets/policies/procedures to support the functional infrastructure. Deep knowledge of the managed sub-function and all domains within the OCISO is required. Must have subject matter expertise in all networking, security, directory services, and governance is required. Must be able and qualified function as chief cybersecurity architect for all security related architecture for internal and cloud-based resources.
It is the goal of Vidant Health and its entities to employ the most qualified individual who best matches the requirements for the vacant position.
Offers of employment are subject to successful completion of all pre-employment screenings, which may include an occupational health screening, criminal record check, education, reference, and licensure verification.
We value diversity and are proud to be an equal opportunity employer. Decisions of employment are made based on business needs, job requirements and applicant’s qualifications without regard to race, color, religion, gender, national origin, disability status, protected veteran status, genetic information and testing, family and medical leave, sexual orientation, gender identity or expression or any other status protected by law. We prohibit retaliation against individuals who bring forth any complaint, orally or in writing, to the employer, or against any individuals who assist or participate in the investigation of any complaint.