Chief Information Security Officer

Job Description

Position Overview

We are seeking an experienced and strategic Chief Information Security Officer (CISO) to lead cybersecurity strategy, information security operations, and risk management for a growing healthcare organization in the Tampa area.

The CISO will be responsible for developing and executing a comprehensive information security program that protects sensitive patient information, enterprise technology infrastructure, and critical business systems.

This individual will partner closely with executive leadership, IT teams, and operational stakeholders to ensure the organization maintains a secure, compliant, and resilient technology environment.

The ideal candidate will bring a combination of executive leadership, hands-on cybersecurity expertise, healthcare regulatory knowledge, and experience implementing enterprise security initiatives.

Key Responsibilities

Cybersecurity Strategy & Leadership

\n
• Develop, implement, and oversee the organization's enterprise cybersecurity strategy and security roadmap.
\n
• Establish security policies, procedures, standards, and governance frameworks.
\n
• Partner with executive leadership to align cybersecurity initiatives with organizational objectives.
\n
• Manage cybersecurity budgets, technology investments, and security-related vendor relationships.
\n
• Provide regular reporting on cybersecurity risks, initiatives, and performance to executive leadership.
\n

Security Operations & Infrastructure

\n
• Oversee enterprise security operations, threat monitoring, vulnerability management, and incident response.
\n
• Lead the implementation and management of security technologies, including firewalls, endpoint protection, SIEM, and identity management solutions.
\n
• Collaborate with IT infrastructure and engineering teams to secure networks, servers, cloud environments, and enterprise applications.
\n
• Develop and maintain disaster recovery, business continuity, and cybersecurity incident response plans.
\n
• Evaluate emerging cybersecurity threats and implement proactive mitigation strategies.
\n

Healthcare Compliance & Risk Management

\n
• Ensure alignment with applicable healthcare security and privacy regulations, including HIPAA and HITECH.
\n
• Oversee security risk assessments, audits, and remediation initiatives.
\n
• Develop security controls aligned with recognized frameworks such as NIST and HITRUST.
\n
• Protect electronic protected health information (ePHI) and other sensitive organizational data.
\n
• Manage third-party cybersecurity risks, vendor security assessments, and compliance requirements.
\n

Executive Leadership & Collaboration

\n
• Serve as the organization's primary cybersecurity advisor to executive leadership.
\n
• Work closely with IT leadership, compliance, legal, and healthcare operations teams.
\n
• Lead security awareness training and promote a security-focused organizational culture.
\n
• Build, mentor, and manage internal cybersecurity resources and external security partners.
\n
• Communicate complex cybersecurity risks and recommendations to both technical and nontechnical stakeholders.
\n

Required Qualifications

\n
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent professional experience.
\n
• 10+ years of progressive experience in information technology or cybersecurity.
\n
• 5+ years of cybersecurity leadership or management experience.
\n
• Demonstrated experience developing and implementing enterprise cybersecurity programs.
\n
• Strong understanding of HIPAA, healthcare data security, and regulatory compliance.
\n
• Experience with enterprise security architecture, cloud security, network security, and identity and access management.
\n
• Proven ability to lead cybersecurity incident response and risk management initiatives.
\n
• Strong communication skills with the ability to present security strategies and risks to executive leadership.
\n
• Experience managing cybersecurity budgets, vendors, and strategic technology initiatives.
\n

Preferred Qualifications

\n
• Previous experience as a CISO, Deputy CISO, Director of Information Security, or Head of Cybersecurity.
\n
• Experience supporting healthcare providers, hospital systems, or multi-location healthcare organizations.
\n
• Professional certifications such as CISSP, CISM, CISA, or CRISC.
\n
• Experience with Microsoft Azure, Microsoft 365 security, and enterprise cloud environments.
\n
• Familiarity with security frameworks including NIST CSF, HITRUST, and ISO 27001.
\n
• Experience implementing Zero Trust security architecture.
\n
• Background supporting cybersecurity modernization or digital transformation initiatives.
\n
• Experience overseeing managed security service providers (MSSPs) and external security partners.
\n

Ideal Candidate Profile

The ideal candidate is a hands-on, business-minded cybersecurity executive who can operate strategically while remaining closely involved in technical security initiatives.

This individual should be comfortable working in a growing healthcare environment, balancing regulatory requirements, operational needs, cybersecurity risks, and technology modernization.

Success in this position will require strong leadership, the ability to build relationships across the organization, and a proactive approach to protecting critical healthcare technology systems and patient information.

Why This Opportunity?

\n
• Opportunity to lead and shape cybersecurity strategy for an established healthcare organization.
\n
• High-visibility leadership position working directly with executive stakeholders.
\n
• Ability to influence security architecture, technology investments, and long-term cybersecurity initiatives.
\n
• Meaningful opportunity to protect sensitive patient information and support essential healthcare services
\n