Full-time CISO, Prisma Health

Inspire health. Serve with compassion. Be the difference.

02Job Summary

Responsible for the organization's Information Security Program including but not limited to daily operations of the IT security program, integrated risk management program, oversight of the annual and ongoing risk assessment process, development, implementation, and maintenance of policies and procedures, ensuring the confidentiality, integrity and access of electronic protected health information and of monitoring program compliance as well as investigation and tracking of incidents and breaches and in compliance with federal and state law. Serves as the health system designated security official under the HIPAA (Health Insurance Portability and Accountability Act of 1996) Security Rule.

03Essential Functions

All team members are expected to be knowledgeable and compliant with Prisma Health's purpose: Inspire health. Serve with compassion. Be the difference.

Builds a strategic and comprehensive information security program that defines, develops, maintains and implements policies and processes that enable consistent, effective information security practices which minimize risk and ensure the integrity, confidentiality and availability of information that is owned, controlled and processed within the organization. Ensures information security policies, standards, and procedures are up to date.

Oversees and collaborates architectural security design review of existing and new infrastructure systems to include identity and access management, networking, systems platforms, medical devices, IaaS, PaaS and SaaS services.

Creates a culture of cyber security both within the ITS organization and driving behavioral changes for the entire health system. Initiates, facilitates, and promotes activities to foster information security awareness within the organization.

Evaluates security trends, evolving threats, risks and vulnerabilities and applies tools to mitigate risk as necessary.

Manages security incidents and events involving electronic protected health information (ePHI), personally identifiable information (PII) and corporate sensitive data.

Ensure that the disaster recovery, business continuity and incident response plans are maintained and tested according to policy.

Ensures the health system and joint venture partners comply with the administrative, technical and physical safeguards.

Collaborates with senior management, Privacy Officer, and Corporate Compliance officer to establish governance for the security program and keeps health system Board of Directors informed.

Partners with Human Resources and Privacy Officer to ensure consistent sanctions for security violations.

Cooperates with the U.S. Department of Health and Human Service's Office for Civil Rights, State regulators and/or other legal entities, state and federal law enforcement in any compliance reviews or investigations.

Performs other duties as assigned.

04Supervisory/Management Responsibility

Job has direct and/or indirect supervision of team members that may include final budget authority, hire/termination authority, performance appraisal responsibility and disciplinary authority. Job will be considered a member of management staff at Prisma Health Company or affiliate and will have direct reports.

05Minimum Requirements

• Education - Bachelor's degree in Information Systems or related field of study.
• Experience - Ten (10) years of health industry IT and information security management experience
• In Lieu Of
• NA
• Required Certifications, Registrations, Licenses
• Certified Information Systems Security Professional (CISSP)
• Knowledge, Skills and Abilities
• Computer skills (word processing, spreadsheets, databases, and data entry)
• Mathematical skills
• Communication skills
• Collaboration and problem-solving skills
• Knowledge of office equipment
• Knowledge of office equipment and basic computer skills including work processing, spreadsheets, databases and data entry.

Knowledge and experience in state and federal information security laws, including but not limited to HIPAA, including NIST, PCI and all other applicable regulations.

Familiarity with health care relevant legislation and standards for the protection of health information and patient security.

06Work Shift

Day (United States of America)

07Location

Greenville Memorial Hospital

08Facility

Corporate

09Department

Information Security

Share your talent with us! Our vision is simple: to transform healthcare for the benefits of the communities we serve. The transformation of healthcare requires talented individuals in every role here at Prisma Health.