Executive Director of Cybersecurity

About the role

The Executive Director of Cybersecurity will lead the organization’s cybersecurity strategy within a complex healthcare IT environment. Reporting to senior leadership, this role ensures the protection of patient data, medical devices, and cloud infrastructure while maintaining compliance with healthcare regulations.

Key responsibilities

• Design, implement and manage enterprise security solutions including firewalls, IDS/IPS, VPNs, vulnerability scanners and penetration testing tools.
• Conduct risk assessments across electronic health records, medical devices and IT infrastructure, and develop mitigation plans.
• Lead forensic investigations of security incidents and report findings to executive leadership and the board.
• Develop, test and maintain disaster recovery and business continuity plans.
• Provide regular metrics and reports on cybersecurity program effectiveness.
• Serve as the primary liaison between IT, executive leadership, external partners and regulatory bodies.
• Ensure alignment with ITIL/ITSM processes and internal control requirements.

Required profile

• Proven leadership experience in healthcare IT and cybersecurity management.
• Strong communication skills with the ability to present technical information to non‑technical executives.
• Track record of managing large, cross‑functional security teams under pressure.
• Deep understanding of healthcare regulations such as HIPAA, HITECH and FDA guidelines.

Required skills

• Firewalls (host‑based and appliance)
• Intrusion Detection/Prevention Systems (IDS/IPS)
• Virtual Private Networks (VPN)
• Vulnerability scanning and penetration testing
• Forensic analysis tools
• Encryption technologies
• Risk assessment methodologies
• Disaster recovery and business continuity planning
• ITIL/ITSM frameworks
• Cloud security and medical device security
• EHR security best practices