Vice President, Cybersecurity

About the role

The Vice President, Cybersecurity leads the Iowa Hospital Association’s operational and technical cybersecurity program. Reporting to the Senior Vice President of IT Operations & Security, this executive provides strategic direction and advanced technical oversight across security operations, engineering, architecture, governance, and risk management.

Key responsibilities

• Develop, execute, and continuously improve the enterprise cybersecurity strategy, roadmap, and operating model.
• Oversee security operations including SIEM, Managed Detection & Response (MDR), SOC services, vulnerability management, and incident detection, response, and recovery.
• Coordinate tabletop exercises and disaster‑recovery drills, ensuring lessons learned are documented and acted upon.
• Own and govern cloud‑based and on‑premises security architecture, enforcing secure‑by‑design and defense‑in‑depth principles.
• Establish, maintain, and enforce cybersecurity policies, standards, and control frameworks aligned with SOC 2, NIST, CSF, HIPAA, and HITECH.
• Manage third‑party cybersecurity risk through vendor assessments and ongoing monitoring.
• Measure, report, and communicate risk posture via metrics, KPIs, executive dashboards, and playbooks.
• Partner with HR and Marketing Communications to deliver organization‑wide security awareness and training programs.

Required profile

• Proven senior leadership experience in cybersecurity within a complex, regulated environment.
• Strong strategic thinking with the ability to set priorities and recommend investments.
• Authority to approve risk treatment recommendations and activate incident response plans.
• Excellent communication skills to translate technical risk into business impact for executive stakeholders.

Required skills

• Security Information and Event Management (SIEM)
• Managed Detection and Response (MDR)
• Security Operations Center (SOC) management
• Vulnerability management
• Incident detection, response, and recovery
• Cloud security architecture
• NIST Cybersecurity Framework
• SOC 2 compliance
• HIPAA and HITECH regulatory knowledge

What we offer

• Leadership role shaping cybersecurity strategy for a major healthcare association.
• Opportunity to influence industry‑wide security standards and practices.
• Collaborative environment that values ownership, innovation, and servant leadership.