Find Jobs
Find Jobs Near You – Available Work in Your Location
Director - Cyber Security
Career Insights for Cyber Security Manager / Administrator
See where this job fits in the broader career landscape. Knowing your career path helps you see what's possible from here.
Scorecard
Based on Tennessee data
Review key factors to help you decide if this role fits your goals. How is this calculated?
What they do
A Cyber Security Manager or Administrator monitors, controls, and maintains systems that protect the security of large databases, including databases with customer information and patient files. Manages and administers the examination of client computer systems, identification of weak points in security, development and implementation of new systems, and monitoring and response to security issues.
$124,143 / year median in Tennessee
+4% projected growth
Job Description
Job Detail
Job Title:
Director - Cyber Security
Department:
Info Services Security
Full/Part Time:
Full
Req Number:
UHS-36467
Position Summary:
The Director of Cybersecurity is a senior leadership team member responsible for leading, managing, and continuously improving the organization's cybersecurity program across a complex enterprise environment. Reporting directly to the Chief Information Security Officer (CISO), this role serves as the operational leader of cybersecurity and is responsible for executing the organization's security strategy, reducing cyber risk, protecting critical assets, and ensuring the resilience of business and clinical operations.
The Director of Cybersecurity provides leadership across cybersecurity Operations, Incident Response, Vulnerability Management, Security Engineering, Identity and Access Management (IAM), Governance, Risk and Compliance, Third-Party Risk Management, and Security Training and Awareness.
Cybersecurity Program Leadership
Lead the day-to-day management and execution of the enterprise cybersecurity program.
Develop, implement, and maintain cybersecurity strategies, roadmaps, policies, standards, and procedures.
Serve as a strategic advisor to the CISO.
Security Operations & Threat Management
Provide leadership and oversight of Security Operations Center (SOC) functions.
Lead threat detection, incident response, and crisis management activities.
Security Engineering & Infrastructure Protection
Direct security engineering activities supporting enterprise infrastructure, cloud services, applications, and data platforms.
Vulnerability & Exposure Management
Lead enterprise vulnerability management and attack surface reduction initiatives.
Identity & Access Management
Provide executive oversight of IAM capabilities including Multi-factor Authentication (MFA), Privileged Access Management (PAM), Single Sign On (SSO), and Identity Governance and Administration (IGA).
Risk Management & Governance
Lead cybersecurity risk assessment, treatment, and reporting activities.
Regulatory Compliance & Audit Support
Support audits, regulatory reviews, and compliance requirements.
Cloud Security & Emerging Technology
Oversee security governance for cloud platforms and emerging technologies.
Third-Party Risk Management
Lead vendor management and third-party cybersecurity risk assessments.
Leadership & Team Development
Lead, mentor, and develop cybersecurity team members.
Position Qualification:
Education
Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, Engineering, or related field.
Required
Minimum 12 years of progressive cybersecurity experience.
Minimum 7 years of progressive leadership experience managing cybersecurity teams, with at least 3 years in a senior leadership (Manager or above) position.
Experience in regulated or mission-critical environments.
Experience developing cybersecurity strategy, policy, and governance programs.
Experience developing and managing operating and capital budgets.
Experience presenting cybersecurity risks and controls to leadership, partners, and other stakeholders.
Experience working with industry recognized cybersecurity frameworks including NIST, HITRUST, and CIS.
CISSP or CISM certification.
Preferred
Master's Degree in Cybersecurity, Information Assurance, Business or other related field.
Experience in Academic Health System or other complex healthcare environment
CCSP, CRISC, CISA, CGRC, GIAC
certifications, cloud security certifications, TOGAF, SABSA.