Director, IT Security Operations

Director, It Security OperationsThe University of Miami Health System, "UHealth", IT Department has an exciting opportunity for a Full-Time Director, IT Security Operations to work in Miami.The Director, Information Security Operations oversees all aspects of security operations and support services and leads all cybersecurity incident response related activities. The incumbent directs internal teams in the execution of initiatives as they relate to threat analysis, monitoring, systems and applications, responding to all related cybersecurity alerts, and supporting strategic IT initiatives. The Director, Information Security Operations exercises considerable judgment by making decisions in unprecedented situations.Core Responsibilities:Supervises the performance management of all assigned staff including making decisions as they pertain to hiring, training, evaluation, promotion, and termination.Manages daily operations and directs staff to achieve departmental goals and objectives.Assumes responsibility for campus-wide initiatives involving computer support services.Develops, promotes, and maintains standards as they relate to technical support services and devices, including manufacturing and architectural standards.Designs improved work systems by revising work standards, policies, and procedures.Directs and manages project plan development, risk assessment, communications, budget tracking, status reporting, vendor management, and successful project completion.Manages projects with support staff by giving them a clear understanding of the departmental mission. Monitors project prioritization, active projects, and the development of dashboard and reporting mechanisms.Assumes responsibility for enterprise-wide IT projects and ensures an efficient and timely conclusion.Contributes to strategic plan and assists in providing short- and long-term solutions to help meet campus-wide strategic and tactical planning initiatives. Communicates with administration and staff regarding the efficient and timely delivery of services.Performs follow-up investigations on inquiries, complaints, and problems.Assists in the determination of critical milestones.Seeks ways to improve operations and oversees the preparation of productivity reports.Establishes departmental goals and objectives, identifies areas of improvement, and implements action plans to meet these.Attends professional meetings, workshops, conferences, and seminars to keep abreast of technological market advancements.Establishes and continuously assesses the effectiveness of the internal controls within the unit and compliance with University policies and procedures. Ensures employees are trained on controls within the function and on University policy and procedures.Department Specific Functions:In charge of managing the enterprise security operations teamServe as the main point of contact for supporting the enterprise patch and vulnerability managementIn charge of managing and monitoring the University's security platformsServe as the point of contact with Managed Detection and Response security service sroviders/MDDRsManage the day-to-day Enterprise IT Security OperationsOversee the day-to-day deploying and managing end-point protection solutionsOversee the log ingestion from all enterprise critical systems and applications in the Security Incident and Event Monitoring (SIEM) and MDR toolsExperience in Cybersecurity Incident ResponseResponsible for periodically reviewing network and security architectureEvaluate and provide recommendations on implementation of security controls to detect, prevent, protect the University's network resourcesSupport all cybersecurity incident response (IR) investigations, help prioritize the necessary actions to protect the University's network resourcesStay current with industry trends, emerging threats, and best cybersecurity practicesCollect, analyze, and disseminate cyber threat intelligence from various sources to stay ahead of emerging threatsThis list of duties and responsibilities is not intended to be all-inclusive and may be expanded to include other duties or responsibilities as necessary.CORE QUALIFICATIONS:Bachelor's degree in relevant fieldCertified Information Systems Security Professional (CISSP)Certified Information Security Manager (CISM)Security +Certified Ethical HackerCloud Security certification7+ years of experience in information security, especially on a Computer Incident Response Team (CIRT), Computer Emergency Response Team (CERT), Computer Security Incident Response Center (CSIRC) or a Security Operations Center (SOC)7+ years of experience in another IT function, especially IT Audit7+ years of experience with regulatory compliance and information security management frameworks (e.g., IS027000, COBIT, NIST 800, etc.)Ability to react quickly, decisively and deliberately in high-stress, high-impact situationsStrong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate oneAbility to lead, motivate, develop, and train others.Skill in collecting, organizing, and analyzing data.Knowledge of business and management principles.Ability to direct, manage, implement, and evaluate department operations.Ability to establish department goals, and objectives that support the strategic plan.Ability to effectively plan, delegate and/or supervise the work of others.Any appropriate combination of relevant education, experience and/or certifications may be considered.