The Director of Cyber Security Operations is responsible for overseeing the day-to-day operations of the Cyber Security team and enhancing the organization’s capabilities to defend against cyber threats. Reporting directly to the Chief Information Security Officer (CISO), this leader will play a critical role in safeguarding the organization's cybersecurity posture while driving continuous improvements across cybersecurity capabilities.

Responsibilities: Include but not limited to:

• Provide leadership, direction, and guidance to the Cyber Security team, overseeing daily operations and recommend long-term strategic initiatives.
• Develop recommendations, implement, and manage a comprehensive security strategy that aligns with the organization's business objectives.
• Collaborate with senior leadership to influence security decisions and drive initiatives across the organization.

• Proactively evaluate business threats, security risks, and operational capabilities, developing and refining security strategies to reduce risk and enhance detection.
• Oversee the management and continuous improvement of security tools, technologies, processes and procedures.
• Direct incident response, ensuring alignment with technical response and organizational resiliency.
• Build relationships with IT, Legal, HR, and Global Communications teams to ensure coordinated incident responses during cybersecurity events.
• Ensure compliance with internal security policies, industry standards, and regulations, such as NIST and HIPAA.

• Identify, assess, and prioritize information security risks, ensuring real-time risk mitigation strategies.
• Lead the organization’s efforts in compliance with relevant laws, regulations, and industry standards such as HIPAA and other applicable laws.
• Perform security audits, assessments, and gap analysis, ensuring all identified risks are addressed within agreed timelines.

• Lead, mentor, and manage the Cyber Security team, fostering a culture of continuous learning and security awareness.
• Collaborate with cross-functional teams, including IHT, Supply Chain, and Legal, to integrate security across all stages of system development and operations.
• Oversee the organization's vulnerability management, ensuring the identification, assessment, and timely remediation of vulnerabilities.

• Support the CISO who serves as the primary advisor to senior executives and the Board of Directors, providing updates on the organization’s security posture and risk management activities.
• Provide regular reports on security metrics, incident analysis, and improvement plans to executive management.

• Evaluate, manage, and negotiate vendor relationships for cybersecurity products and services.
• Ensure third-party and vendor security practices align with the organization's standards.

Minimum Qualifications:

• Education: Bachelors degree or experience in lieu of degree
• Experience: 10 years relevant experience
• Licenses/Certifications: None

   

At St. Luke’s, caring for people in the communities we serve is our mission – and this includes our own SLHS team. We offer a robust benefits package to support our teams both professionally and personally. In addition to a competitive salary and retirement plans, we ensure our team feels supported in their benefits beyond the typical medical, dental, and vision offerings. We care about you and have fantastic financial and physical wellness options, such as: on-site massages, on-site counseling via our Employee Assistance Program, access to the Virgin Pulse Wellness tool, as well as other formal training and career development offerings to ensure you are meeting your career goals.

St. Luke’s is an equal opportunity employer and does not discriminate against any person on the basis of race, religion, color, gender, gender identity, sexual orientation, age, national origin, disability, veteran status, or any other status or condition protected by law.

*Please note: this posting is not reflective of all job duties and responsibilities and is intended to provide an overview to job seekers.