Job Summary :
The IT Security Officer and Director(CISO)is responsible forestablishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected.
This role will oversee and coordinate security efforts across the company, including information technology, human resources, communications, legal, and other groups, and will identify security initiatives and standards.
Key Responsibilities :
Develop and Implement Security Strategy :
Develop, implement, and monitor a strategic, comprehensive enterprise information security and IT risk management program.
Work with senior management and corporate risk governance teams todetermine acceptable levels of risk for the organization.
Collaborate with other departments to ensure security measures are integrated into all aspects of the organization's operations.
Stay current with emerging security trends, threats, and technologies, and recommend enhancements to the security program.
Security Operations :
Lead incident response planning and investigation of security breaches and assist with any associated disciplinary and legal matters.
Direct the installation and use of security tools (e.g., firewalls, dataencryption, IDS / IPS) to protect sensitive information.
Monitor and manage security systems and tools to detect and respond to security threats and incidents.
Conduct regular security assessments and vulnerability scans to identify and mitigate security risks.
Conduct thorough investigations of security breaches and incidents,implementing corrective actions and documenting findings.
Provide security awareness training and education to employees to promote a culture of security.
Prepare and present regular reports on the status of the information security program to senior management.
Compliance and Governance :
Ensure compliance with the changing laws and applicable regulations.
Coordinate and track all information technology and security-related audits, including scope of audits, units involved, timelines, auditing agencies, and outcomes.
Manage and continuously improve information security governance processes.
SOX Audits :
Oversee IT's internal controls for SOX (Sarbanes-Oxley) audits to ensure compliance with financial reporting requirements.
Work closely with the internal audit team and external auditors to provide necessary documentation and evidence of IT controls.
Identify and remediate any deficiencies in IT controls to maintain SOX compliance.
HIPAA Compliance :
Ensure compliance with the Health Insurance Portability and Accountability Act (HIPAA) by implementing and maintaining robust security measures.
Conduct regular audits and assessments to ensure the protection of Protected Health Information (PHI).
Provide training and resources to staff on HIPAA compliance requirements and best practices.
Risk Management :
Identify and assess risks to the organization's information and IT assets and recommend mitigation strategies.
Develop and maintain the enterprise IT risk register.
Team Leadership and Development :
Oversee the selection and training of information security staff.
Develop security awareness programs and communicate to employees about the importance of information security.
Liaison and Coordination :
Act as a liaison with the company's senior management and the board of directors, ensuring that security issues are prioritized and budgeted appropriately.
Coordinate security initiatives with other departments to ensure integrated risk management.
Security Architecture :
Collaborate with the IT department to design and implement secure IT architectures and networks.
Ensure that security architectures and strategies are in alignment with the organization’s goals and objectives.
Qualifications : Education :
Education :
Bachelor’s degree in Computer Science, Information Systems, Business Administration, or related field.
Master’s degree preferred.
Experience :
Minimum of 10 years of experience in a combination of risk management, information security, and IT roles.
At least five years in a senior leadership role.
Certifications :
Professional security management certification, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), or similar credentials.
Skills and Abilities :
Strong understanding of current and emerging security technologies and how they align to evolving business needs.
Excellent project management, organizational, and leadership skills.
Strong communication and interpersonal skills, with the ability to communicate security-related concepts to a broad range of technical and non-technical staff.
Ability to influence and build consensus at all levels of the organization.
Personal Attributes :
High integrity and ethical standards.
Strong analytical and problem-solving skills.
Ability to remain calm and composed under pressure.
Commitment to continuous learning and development.
Additional Information
We are committed to providing a competitive Total Rewards Package that meets our employee’s needs.
From a choice of medical, dental and vision plans to retirement savings opportunities through a 401(k), company match and various other features, we offer a comprehensive benefits package.
We believe in great work and we celebrate our employees' efforts and accomplishments both locally and companywide, recognizing people daily through our Moments of Truth Program.
In addition to recognition, we believe in supporting our employees' professional growth and development. We provide employees a wide range of free e-courses through our Learning Management System as well as training sessions and seminars.
Compensation : Based on experience.
Type : Full Time
Location :
Pennant Service Center
1675 E. Riverside Drive, #150
Eagle, ID 83616
If interested in this position, please submit a resume for consideration. We look forward to hearing from you!
About The Pennant Group
We are proud to be affiliated with the Pennant Group, Inc. (NASDAQ : PNTG). Pennant was created in 2019 in connection with The Ensign Group, Inc.
s (NASDAQ : ENSG) spin-off of its home health, hospice, and senior living businesses. We believe that through our innovative operating model, we can foster a new level of patient care and professional competence at our independent operating subsidiaries and set a new industry standard for quality home health and hospice and senior living services.
You can learn more about The Pennant Group at www.pennantgroup.comBusiness Process : Job Requisition : JR47682 IT Security Officer and Director (CISO)Subject : Pennant IT - Infrastructure & Security (Tyler Connelly)
IT Security Officer and Director (CISO)
The IT Security Officer and Director(CISO)is responsible forestablishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected. Business Process: Job Requisition: JR47682 IT Security Officer and Director (CISO)Subject: Pen...
Senior Cyber Security Architect - Application & Device Control (m/w/d) in Bonn, Leipzig oder München
Abgeschlossenes IT Studium oder eine vergleichbare Qualifikation mit mehrjähriger Erfahrung im Bereich IT-Sicherheit und IT-Architektur. Das Competence Center IT-Security (CCITS) verantwortet zentrale IT-Sicherheitsservices für die BWI und ihre Kunden. Sicherstellung der Interoperabilität von Device...
IT Finance Lead: Infrastructure & Security
Partner with the Procurement and Finance organization to ensure accurate spend recognition and reporting and multi-year fiscal planning for complex hardware and software contracts. Micron Prohibits the use of child labor and complies with all applicable laws, rules, regulations, and other internatio...
Senior Security Officer
You’ll perform security officer duties and provide supervision to staff to protect life and property against theft, misappropriation, fire, flood, or similar disasters and act as liaison with security and law enforcement agencies, in compliance with federal, state and local regulation, government an...
IT Director Global Engineering Sites & Labs
Corp IT & EIS (Enterprise Infrastructure & Security) – Central IT organization that establishes and drives the Global roadmaps for IT infrastructure, Firewalls & Security, and WAN. Micron Prohibits the use of child labor and complies with all applicable laws, rules, regulations, and other internatio...
Officer Senior Trainer - Security Clearance Required
The Officer Senior Trainer (OST) is the p. ...
Security Officer - Patrol
As a Security Officer, you will serve and safeguard clients in a range of industries such as Commercial Real Estate, Healthcare, Education, Government and more. Allied Universal, North America's leading security and facility services company, provides rewarding careers that give you a sense of purpo...
Security Officer -University
As a Security Officer, you will serve and safeguard clients in a range of industries such as Commercial Real Estate, Healthcare, Education, Government and more. Allied Universal®, North America's leading security and facility services company, provides rewarding careers that give you a sense...
IT Project Manager
There is a possibility it could extend beyond that, but candidates submitted MUST be aware and comfortable accepting a position that may only last for a 3-month duration. This is expected to be a short-term contract position with an initial duration of 3 months. Because this is a fully onsite positi...
Director, IT Cloud Architecture
Lincoln Financial Group (“LFG”) is an Equal Opportunity employer and, as such, is committed in policy and practice to recruit, hire, compensate, train and promote, in all job classifications, without regard to race, color, religion, sex (including pregnancy), age, national origin, disability, sexual...