Cybersecurity Incident & Threat Director

Primary City/State:

Phoenix, Arizona

Department Name:

IT Info Tech Admin-Corp

Work Shift:

Day

Job Category:

Information Technology

Your pay and benefits are important components of your journey at Banner Health. This opportunity includes the option to participate in a variety of health, financial, and security benefits. In addition, this position may be eligible for our Management Incentive Program as part of your Total Rewards package.

Within Banner Health Corporate, you will have the opportunity to apply your unique experience and expertise in support of a nationally-recognized healthcare leader. We offer stimulating and rewarding careers in a wide array of disciplines. Whether your background is in Human Resources, Finance, Information Technology, Legal, Managed Care Programs or Public Relations, you'll find many options for contributing to our award-winning patient care.

POSITION SUMMARY
This position is a cybersecurity leadership position managing several teams and staff within IT Cybersecurity Operations. This position serves as a central point of contact for IT Cybersecurity Operations event management and Security Service Delivery. The IT Cybersecurity Operations Team is responsible for many facets of information cybersecurity management including, but not limited to, Security Operation Center (SOC) monitoring, event analysis, threat detection, incident response, and reporting as well as access fulfillment and managing Cybersecurity incident and request tickets to resolution. As a leader in IT Cybersecurity, this candidate will have ample opportunities to mentor, support, and contribute to multiple teams and initiatives that affect the entire organization through secure usage of technology, industry standards, and best practices.
CORE FUNCTIONS
1. Create and drive delivery of IT and Cybersecurity Threat Management objectives and strategies.
2. Lead and manage IT Cybersecurity managers and staff in the Cybersecurity Incident & Threat Management department. Ensure appropriate resource skill and knowledge is implemented and maintained.
3. Evaluate, direct, and monitor overall cybersecurity operations effectiveness while overseeing and managing capital and operating budget activities.
4. Supervise and direct incident response activities and preparedness for IT Cybersecurity Operations staff: participate and contribute to enterprise security breach response exercise and activities.
5. Collaborate with the Governance, Risk and Compliance department to develop and update cybersecurity operation standards, procedures, guidelines, and best practices.
6. Provide direction and assistance to internal personnel and external entities (subcontractors, contractors and vendors) concerning security of information and critical data processing capabilities.
7. Create and manage metrics and measures specific to the Cybersecurity Operations departments strategy and objectives ensuring goals are being met and staff is adequately performing their job functions, and create and manage three-year strategy and road map for area of responsibility and ensure evolution and continuous improvement across the organization.
8. Conduct operation event analysis reporting on activities through regular scheduled reporting and communications. Escalate critical cybersecurity events and mange the incident response process of driving these incidents to resolution.

9. This position has departmental wide responsibility for a wide range of deliverables and projects supporting the Cybersecurity and IT organization. Work is performed in a fast-paced, multi-tasked environment where there may be conflicting priorities or tight deadlines. The incumbent has decision-making authority and works at peer level and with management across diverse areas. The incumbent participates in meetings, presentations, visioning sessions, strategic and planning sessions, implementation activities, and supports functions system wide. Maintains and applies a broad knowledge of company policies, procedures, and regulatory requirements.
Performs all functions according to established policies, procedures, regulatory and accreditation requirements, as well as applicable professional standards. Provides all customers of Banner Health with an excellent service experience by consistently demonstrating our core and leader behaviors each and every day.
MINIMUM QUALIFICATIONS
Must demonstrate strong management knowledge as normally obtained through the completion of a bachelor’s degree in related field plus, progressive experience in a healthcare environment, or equivalent combination of relevant education, technical, business and healthcare experience typically achieved over ten years.
Must possess strong knowledge of and practicing proficiency typically obtained with ten years of experience in this field. Requires the ability to be articulate and confident with excellent verbal and electronic communication skills. Must demonstrate the skills required to manage and deliver the practices, procedures, and tools required for this position. Must demonstrate superb knowledge in IT Cybersecurity. Needs considerable proven IT Cybersecurity leadership experience to lead large scale project planning, delivery, and reporting. Successful candidate will have skills and experience to recruit, mentor, motivate, evaluate, and retain an effective staff. Requires exceptional communication, presentation, and negotiation skills to engage technical and non-technical audiences. Requires leadership skills with ability to lead, communicate, and interact across facilities and at various levels. Successful candidate will require knowledge and proven abilities with the Microsoft Suite of tools as well as required technical applications.
PREFERRED QUALIFICATIONS
Advanced Degree in Information Systems, Business Administration, or a related field. Industry certifications: CISM, SRM, PMP, CSAM, CRISC, CRVPM, CRCM, etc.
Additional related education and/or experience preferred.

EEO Statement:

EEO/Female/Minority/Disability/Veterans

Our organization supports a drug-free work environment.

Privacy Policy:

Privacy Policy