Manager - Information Security Services | Cybersecurity Incident Response and Security Operations | Full Time

Henry Ford Health System - Rochester Hills, MI

Full-time - Manager

Rochester Hills, MI

Ambulatory Health Care Services

About the position

The Information Security Manager at Henry Ford Health System is responsible for overseeing the development, implementation, and monitoring of security policies and practices to protect patient, employee, and company confidential information. This role involves leading the cybersecurity incident management program, collaborating with various departments, and ensuring compliance with regulatory requirements. The manager will also handle budget planning, project prioritization, and the operational management of security event monitoring technologies.

Responsibilities

• Provide leadership and oversight for the Enterprise-Wide Cybersecurity Incident Management Program.
• Evaluate and update operational processes and procedures to ensure compliance.
• Monitor security compliance with regulatory requirements and industry best practices.
• Manage departmental vendor and partner relationships.
• Contribute to the development of a multi-year IT Security roadmap and budgeting activities.
• Manage the development and implementation of information security policies and standards.
• Provide functional leadership and supervision to Information Security Services staff.
• Ensure each team member understands their role and responsibilities.

Requirements

• Bachelor's Degree in Information Systems, Computer Science, or equivalent certifications.
• CISM/CISSP or equivalent certification required.
• Minimum of 6 years of cybersecurity experience, including 2 years of direct leadership experience.
• Strong verbal, written, and interpersonal communication skills, especially at the executive level.
• Experience with federal and state healthcare information regulations (e.g., HIPAA).
• Advanced knowledge of IT systems, process development, and change management.
• Knowledge of information security best practices and risk frameworks.

Nice-to-haves

• Experience in developing and managing a comprehensive information security program.
• Ability to influence without direct control or authority.
• Excellent customer service and interpersonal skills.

Benefits

• Competitive health plan options including CDHPs, PPO, and HMO plans.
• Dental and eye care coverage.
• Tuition assistance.
• Family forming benefits.
• Discounts to various businesses.