Role Overview for Vice President of Cybersecurity | Healthcare | Atlanta, GA
JRG Partners is proud to partner with a premier, technology-driven healthcare organization in Atlanta, GA, in their search for a visionary and strategic Vice President of Cybersecurity. This executive leadership role is a cornerstone of the organization’s commitment to protecting patient data, ensuring operational integrity, and maintaining the highest levels of trust within the community. In an era where healthcare is increasingly digital, the sanctity and security of sensitive information are paramount. This position offers a unique opportunity to shape and fortify the cybersecurity posture of a large-scale institution dedicated to patient care and medical innovation.
The Vice President of Cybersecurity will serve as the senior-most leader responsible for the comprehensive information security strategy and execution across the enterprise. Reporting directly to the Chief Information Officer (CIO), you will be entrusted with safeguarding the organization’s critical digital assets, including electronic health records (EHR), medical devices (IoMT), patient financial information, and proprietary research data. You will lead a multi-faceted team of security professionals, fostering a culture of security awareness and resilience that permeates every level of the organization. Your leadership will be pivotal in navigating the complex and evolving landscape of cyber threats, regulatory requirements, and technological advancements. This role demands a leader who can balance robust security measures with the need for clinical and operational efficiency, acting as a strategic partner to other executives, a mentor to your team, and a trusted advisor to the Board of Directors.
You will be responsible for a significant budget and will have the autonomy to build and implement a world-class security program. This includes overseeing all aspects of security operations, threat and vulnerability management, incident response, risk assessment, governance, and compliance. The ideal candidate is a seasoned cybersecurity executive with a proven track record in the healthcare sector, possessing a deep understanding of the unique challenges and regulatory frameworks, such as HIPAA and HITECH, that govern the industry. You must be a forward-thinking strategist, an exceptional communicator, and a hands-on leader capable of inspiring excellence and driving transformative change. This is more than a job; it is a mission to protect the systems that enable life-saving care.
Key Responsibilities of Vice President of Cybersecurity | Healthcare | Atlanta, GA
Strategic Leadership and Vision
Develop, implement, and maintain a comprehensive, long-term enterprise cybersecurity strategy and roadmap. Align security initiatives with business objectives, clinical workflows, and patient safety goals to ensure the program acts as a business enabler, not a hindrance. Champion a proactive, risk-based approach to security throughout the organization.
Governance, Risk, and Compliance (GRC)
Establish and oversee a formal GRC framework. Ensure unwavering compliance with all relevant healthcare industry regulations, including HIPAA regulations, HITECH, and PCI-DSS. Lead internal and external audits, manage risk assessments, and develop robust policies, standards, and procedures to mitigate identified risks effectively.
Threat Intelligence and Security Operations
Direct the Security Operations Center (SOC) and oversee all real-time security monitoring, threat detection, and analysis activities. Mature the organization’s threat intelligence capabilities to anticipate and counter emerging threats specific to the healthcare sector. Ensure the continuous improvement of security tools and processes, including SIEM, EDR, and intrusion detection/prevention systems.
Incident Response and Management
Lead the organization’s cyber incident response efforts. Develop, maintain, and regularly test a comprehensive incident response plan to ensure rapid detection, containment, eradication, and recovery from security breaches. Serve as the primary point of contact during a crisis, coordinating with executive leadership, legal, communications, and external agencies.
Team Leadership and Development
Recruit, mentor, and lead a high-performing team of cybersecurity professionals. Foster a collaborative and innovative team culture. Provide ongoing training and professional development opportunities to ensure the team remains at the forefront of cybersecurity knowledge and skills. Manage team performance, set clear objectives, and provide constructive feedback.
Security Architecture and Engineering
Partner with IT and engineering teams to embed security into the design and implementation of all new systems, applications, and infrastructure (SecDevOps). Provide expert guidance on secure architecture for cloud environments (AWS, Azure), networks, endpoints, and medical devices (IoMT).
Executive Communication and Reporting
Regularly communicate the status of the cybersecurity program, including key risks, metrics, and initiatives, to the executive leadership team and the Board of Directors. Translate complex technical concepts into clear, business-oriented language to facilitate informed decision-making and secure necessary resources.
Budget and Vendor Management
Develop and manage the annual cybersecurity budget, ensuring optimal allocation of resources to address the most critical risks. Oversee relationships with third-party security vendors and service providers, managing contracts, service level agreements (SLAs), and performance to maximize value and effectiveness.
Security Awareness and Training
Design and implement a comprehensive, ongoing security awareness and training program for all employees, clinicians, and contractors. Promote a culture where every individual understands their role in protecting the organization’s information assets.
Requirements for the Vice President of Cybersecurity | Healthcare | Atlanta, GA
Required Qualifications:
- A minimum of 15 years of progressive experience in information security and IT risk management, with at least 7 years in a senior leadership role (Director, Senior Director, or VP level).
- Bachelor’s degree in Computer Science, Information Security, or a related field. A Master’s degree (MBA or MS in Cybersecurity) is highly preferred.
- Demonstrable experience developing and executing cybersecurity strategy within a large, complex organization, preferably within the healthcare provider or hospital system sector.
- Expert-level knowledge of healthcare compliance frameworks and regulations, including HIPAA (Security, Privacy, and Breach Notification Rules) and HITECH.
- Proven experience with major security frameworks such as NIST Cybersecurity Framework (CSF), NIST 800-53, HITRUST, and ISO 27001/27002.
- One or more of the following professional certifications: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), or equivalent.
- Strong leadership skills with a track record of building, mentoring, and leading high-performing, geographically dispersed security teams.
- Exceptional communication, presentation, and interpersonal skills, with the ability to engage and influence C-level executives, board members, and clinical staff.
- Hands-on experience managing security incidents, conducting forensic investigations, and leading crisis management efforts.
Preferred Qualifications:
- Experience securing Electronic Health Record (EHR) systems such as Epic or Cerner.
- In-depth knowledge of securing Internet of Medical Things (IoMT) and other clinical technologies.
- Significant experience with cloud security architecture and controls in AWS, Azure, or GCP environments.
- Experience managing cybersecurity programs in organizations with a significant research and development component.
- Established relationships with industry peers, government agencies (e.g., FBI, HHS), and information-sharing organizations (e.g., H-ISAC).
- A history of thought leadership, such as public speaking at industry conferences or publications on cybersecurity topics.
Benefits & Perks Offered
Our client offers a highly competitive executive compensation package designed to attract and retain top-tier talent. This includes:
- Competitive Base Salary and Executive Bonus Program
- Long-Term Incentive Plan (Equity/Stock Options)
- Comprehensive Health, Dental, and Vision Insurance for you and your dependents
- Generous 401(k) Retirement Plan with significant employer match
- Substantial Paid Time Off (PTO), including vacation, sick leave, and holidays
- Relocation assistance for qualified candidates
- Annual budget for professional development, certifications, and conference attendance
- Life and Disability Insurance
- Wellness programs and employee assistance resources
- The opportunity to make a meaningful impact on patient care and safety in a mission-driven organization
How to Apply
This is an exclusive search being conducted by JRG Partners. If you are a transformative cybersecurity leader with a passion for healthcare and the qualifications outlined above, we encourage you to apply for this career-defining opportunity. To be considered, please submit your resume and a cover letter detailing your relevant experience.
For more information or to apply, please visit the listing on our website or connect with one of our executive recruiters through the JRG Partners’ CISO & Security Leadership Search Practice Area page. We look forward to connecting with you and exploring how your expertise can help safeguard the future of healthcare.
