The Role
Leads HonorHealth’s information security program, including security framework implementation, risk management, incident escalation, security operations, access management, data protection, and compliance. Manages security personnel, develops procedures and metrics, coordinates incident response, supports enterprise stakeholders, and improves the organization’s security posture across healthcare systems and applications.
Summary Generated by Built In
Primary City/State:
Deer Valley - 2500 W Utopia Rd Phoenix, AZ 85027Category:
Information SecurityShift:
DayDepartment:
Information SecurityHybrid, must reside in Arizona
1 day on-site (Thursday)
Great care starts with great people. (Like you.)
At HonorHealth, you’ll find something special. From humble beginnings in 1927 to one of Arizona’s largest nonprofit healthcare systems, our culture is built on warmth and neighborly kindness. Behind every smile is a highly skilled professional with deep expertise and an unwavering dedication to what matters most — caring for the health and well-being of people and communities across the greater Phoenix area.
Responsibilities:
JOB SUMMARY
The Information Security Manager (ISM) is responsible for leading the implementation and support of formal Information Security frameworks and will take a central role in promoting a culture of information security throughout HonorHealth. The ISM will ensure HonorHealth has the protections and controls to effectively ensure the Confidentiality, Integrity and Availability (CIA) of information resources. The ISM will serve a critical role in optimizing HonorHealth's security posture to protect information resources from attack, theft, damage or unauthorized access. The ISM will lead the HonorHealth in the adoption and use of strong security measures to protect sensitive information, systems and resources, while balancing this with the ease of staff and stakeholder access to sensitive information and the efficient use of computer systems.
ESSENTIAL FUNCTIONS
- Provide leadership direction and subject matter expertise across one or more of our Information Security pillars including, Threat and Vulnerability Management; Identity and Access Management; Architecture and Engineering; Data Protection; Governance Risk and Compliance; Security Operations; Security Awareness and Incident Response.
- Directly manages all human resource aspects of personnel management within assigned area including selection of new associates, initial and ongoing development, evaluation, counseling, scheduling, etc. Creates and updates standard work; Provide metrics for identified key performance indicators; Plans, establishes and revises work assignments; Monitors service management queues for work directives.
- Maintains customer-driven relationship with the operational departments across HonorHealth system care sites and corporate areas. Ensures that policies and procedures meet standards. Actively participates in decision making with management and seeks to understand the broader impact of current decisions and the effects on business requirements that will translate into system requirements.
- Provides direction as first point of contact for security incident escalations. Ensure that security incident escalation procedures are followed by all staff according to policy. Ensure that security events are clearly documented and contain detailed information regarding issue tracking and resolution. Identify and report system and network security issues ensuring all events are entered in ticket tracking application and escalated accurately. Ensure that all issues are proactively tracked and monitored to ensure timely resolution. Coordinate security incident management events follow escalation procedures as documented according to policy. Assists the Security team in security incident resolution and risk evaluations. Maximize value of purchased Information Security tools.
- Performs other duties as assigned.
EDUCATION
- Bachelors or 4 years' work related experience Information Technology or Business Administration Required
EXPERIENCE
- 5 years, IT management or supervisory practices, in areas such as Threat and Vulnerability Management; Identity and Access Management; Architecture and Engineering; Data Protection; Governance Risk and Compliance; Security Operations; Security Awareness and Incident Response. Required
- 8 years, Management experience in a health care environment and with health care applications and multi-institutional health systems or health care consulting experience Preferred
LICENSE AND CERTIFICATIONS
- Information Technology Infrastructure Library V3 Certification - Certification, Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), ITIL v3 Foundation Certification Preferred
- Certified Information Systems Security Professional - Certification, Combination of one or more of the following - CISSP, SAN Certs Preferred
We're all in for your career.
Skills Required
- Bachelor’s degree in Information Technology or Business Administration, or four years of related work experience
- Five years of IT management or supervisory experience in information security disciplines such as threat and vulnerability management, IAM, security operations, GRC, or incident response
- Eight years of management experience in a healthcare environment involving healthcare applications and multi-institutional health systems, or healthcare consulting experience
- Information Technology Infrastructure Library (ITIL) v3 certification
- Certified Information Security Manager (CISM) certification
- Certified Information Systems Auditor (CISA) certification
- ITIL v3 Foundation certification
- Certified Information Systems Security Professional (CISSP) certification or one or more SANS certifications
- Must reside in Arizona and work onsite one day per week
Similar Jobs
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
This practice is a dedicated team of electrophysiologists, physician assistants, nurses and technicians, who as a group, are committed to treating and caring for patients experiencing problems with their heart's rhythm and electrical signaling.
