Manager - IS Information Security GRC & Security Architecture
UHS
Summary
The Manager – Information Security GRC and Security Architecture manages the deployment and support of the Governance, Risk, and Compliance (GRC) program and cybersecurity architecture functions that support the security of electronic information, systems, networks, cloud environments, and business processes across all Corporate, BH and Acute Hospitals. Leads and supervises GRC and Security Architecture staff and resources to execute program activities and initiatives in alignment with the organization’s Information Security Management Systems, established policies, enterprise architecture standards, and regulatory requirements.
Job description
Key Responsibilities
- Provides management of the implementation and ongoing support of corporate owned information security applications, cybersecurity architecture standards, and security controls.
- Participates in leading security compliance (e.g., PCI compliance) initiatives to clearly identify control objectives and work with other teams to exceed audit objectives.
- Exercises responsibility for supervision, performance evaluations and direction of team.
- Coordinates work assignments given in order to meet deadlines and ensure continued progress toward assignment completion.
- Works with CISO to identify current and emerging threats to our systems and environment to prevent incidents where possible and actively manage them as necessary.
- Works closely with CISO and other senior level personnel to further enhance and develop their leadership skills.
- Continually evaluates the security posture and cybersecurity architecture of cloud, network, infrastructure, endpoint, application, and data environments against internal policy, regulatory requirements, enterprise standards, and industry best practices.
Requirements
- Bachelor’s degree required.
- 5-8 years of progressive information security experience that includes 1-3 years management experience and / or 3 years of direct Information Security experience in a multi-facility Acute and BH Hospital environment.
- Healthcare industry experience preferred.
- Working knowledge of cybersecurity architecture principles, secure design patterns, cloud security architecture, identity and access management, network segmentation, endpoint protection, data protection, vulnerability management, and security control integration across enterprise technology environments.
- Strong technical analytical skills, project management certification and/or experience, process improvement related to workflow processes, training, development of educational material.
- Proven knowledge and experience developing and implementing a cybersecurity risk management framework based on regulations such as HIPAA or SOX and best practices as defined in NIST, ISO, PCI, and other common cybersecurity frameworks.
- Ability to review proposed technology solutions, assess architectural risk, define security requirements, and partner with infrastructure, application, cloud, and business teams to embed security controls into solution designs.
- Able to communicate clearly and respectfully with Executives, and all other personnel.
- Strong process and technology analysis skills.
- Ability to prioritize and balance multiple projects, priorities, or objectives.
- Learns quickly, takes constructive feedback on performance, stays focused on the job with attention to detail and produces desired outcomes.
Benefits
- Competitive Compensation
- Medical, Dental & Vision
- Prescription Drug Plan
- 401(k) Matching
- Paid Time Off
- Growth Opportunities
Company overview
Universal Health Services, Inc. (UHS) is one of the nation's largest and most respected providers of hospital and healthcare services, operating as a Fortune 300 corporation headquartered in King of Prussia, Pennsylvania. Founded in 1979, UHS has grown into a major healthcare enterprise with approximately 99,000 employees and annual revenues exceeding $14 billion. The company operates through its subsidiaries, managing 29 acute care hospitals, 331 behavioral health facilities, and 60 outpatient and other facilities across 39 U.S. states, Washington D.C., Puerto Rico, and the United Kingdom. UHS provides comprehensive healthcare services including acute care, behavioral health treatment, cancer centers, and ambulatory surgical centers. The company's strategy focuses on building or acquiring high-quality hospitals in rapidly growing markets and investing in advanced medical equipment and skilled personnel to become the leading healthcare provider in each community it serves. UHS is publicly traded on the New York Stock Exchange (NYSE: UHS) and has established a strong reputation for delivering compassionate, high-quality care while maintaining financial stability and operational excellence.