General Summary

Responsible for developing, implementing, and maintaining security protocols and procedures to safeguard the medical system's digital assets and infrastructure while overseeing all aspects of information security within the organization. Coordinate tasks and risks to remediate with other departments, and stay abreast of emerging threats and technologies to ensure the organization's security posture remains robust. Work is performed under limited supervision. Direct report to the Director Information Security.

Principal Responsibilities and Tasks

The following statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not to be construed as an exhaustive list of all job duties performed by personnel so classified.

• Oversee the Security Operations Center and manage a team of Security Analysts responsible for reviewing, assessing, and triaging security events.
• Lead security incident response procedures and escalate incidents to appropriate stakeholders.
• Partner and share data with Risk Management and Engineering teams to improve UMMS Cybersecurity posture.
• Assure completion of remediation tasks associated with Threat Intelligence, Vulnerability Management, and Incident Response alerts.
• Coordinate team initiatives and projects and ensure completion of tasks.
• Review and update the Incident Response Plan and Standard Operation Procedure (SOP) on a continuing basis while seeking opportunities to create new SOPs.
• Develop and implement process for tracking key operational metrics.
• Establish comprehensive metrics and reporting to evaluate team performance to ensure goals and objectives are being met.
• Identify and resolve operational and performance gaps and obstacles; recommend/implement changes and improvements.
• Provide forward thinking technical expertise in current and emerging technologies, trends, and best practices.
• Mentor team members in the areas of Incident Response, Vulnerability Management, Threat Intel, Threat Hunting, and Forensics.
• Foster a culture of collaboration, problem solving, innovation, continuous learning, and a one team mindset.
• Mentor staff in both technical and soft skills to craft a team of highly competent, consistent, thoughtful, and customer-centric information security experts.
• Evaluate personnel effectiveness and develop/implement training programs to improve performance.
• Perform managerial functions including hiring, discipline, training and development, and prepare performance reviews in accordance with UMMS policies and procedures.
• Perform other duties as assigned.