AVP, Cybersecurity

$205,200 - $359,100/Yr

Northwell Health - Melville, NY

Full-time - Senior

Melville, NY

Ambulatory Health Care Services

About the position

The AVP of Cybersecurity is a pivotal role within the organization, responsible for directing the cybersecurity function and developing and executing the organization's information security strategy. This position works closely with the Chief Information Security Officer (CISO) to safeguard the organization's information assets from unauthorized access, disclosure, disruption, modification, or destruction. The AVP will shape and implement cybersecurity strategies, oversee various aspects of the cybersecurity function, and ensure the organization is protected against cyber threats. In this role, the AVP will lead the cybersecurity function by developing, implementing, and maintaining the organization's information security strategy and program in alignment with Northwell's strategic objectives. The AVP will also be responsible for articulating a long-term strategic vision for cybersecurity, identifying and assessing information security risks, and developing risk management strategies. This includes monitoring the threat landscape and emerging security trends to proactively identify and mitigate risks. Collaboration is key, as the AVP will work with various functional areas and business units to ensure that security initiatives align with business objectives and are integrated into Northwell's operations. The AVP will advocate for cybersecurity efforts, provide strategic guidance regarding investments impacting information security, and represent the cybersecurity function in meetings with senior management and external stakeholders. Additionally, the AVP will oversee security audits, maintain compliance with cybersecurity regulations, and advise senior leadership on complex risk management issues. The role also involves developing and maintaining security KPIs and metrics, overseeing operational and capital budgets, and identifying continuous improvement opportunities within the cybersecurity function. The AVP will play a crucial role in career development planning for team members and will ensure that staffing needs are met in collaboration with HR. This position requires a proactive approach to leadership and a commitment to enhancing the organization's cybersecurity posture.

Responsibilities

• Leads the cybersecurity function by developing, implementing, and maintaining the organization's information security strategy and program in alignment with Northwell's strategy and objectives.
• Develops and articulates a long-term (1+ years) strategic vision for areas of responsibility.
• Works with the CISO to identify and assess information security risks and develop risk management strategies.
• Monitors the threat landscape and emerging security trends to proactively identify and mitigate risks.
• Collaborates with various functional areas and business units to ensure alignment of security initiatives with business objectives.
• Articulates the need, value, and impact of cybersecurity and serves as an advocate and champion for cybersecurity efforts.
• Provides strategic guidance and advocacy regarding the prioritization of investments that impact information security.
• Represents the cybersecurity function in meetings and presentations with senior management and external stakeholders.
• Drives the development and evolution of cybersecurity governance and associated processes to ensure timely, data-driven, and risk-mitigating decision-making.
• Assists the CISO in the development and maintenance of security policies, standards, and procedures to meet compliance requirements.
• Oversees and conducts regular security audits and assessments to ensure adherence with security frameworks, regulatory requirements, and industry standards.
• Ensures compliance with relevant cybersecurity regulations across Northwell's for-profit entities.
• Advises senior leadership on complex issues requiring advanced knowledge of risk management, threat modeling, and disaster recovery planning.
• Coordinates the successful completion of interdepartmental information security projects with resources from other departments and external service providers.
• Develops and maintains security KPIs/metrics and reporting to track the effectiveness of the security program.
• Develops and oversees operational and capital budgets.
• Identifies continuous improvement opportunities including enhancements, automation/AI, new features, streamlining workflows, and collaborating with stakeholders to improve and mature the cybersecurity function.
• Exercises wide latitude of authority in determining objectives and approaches to critical assignments.
• Assists in career development planning for team members.
• Responsible for directing staffing appropriately for departments and collaborating with HR to fulfill requirements.
• Provides guidance and direction to managers as appropriate.

Requirements

• Master's Degree required, or equivalent combination of education and related experience.
• 10-12 years of relevant experience and 7+ years of leadership/management experience required.

Benefits

• Comprehensive benefits package including health insurance, retirement plans, and paid time off.