Chief Information Security Officer

Chief Information Security Officer (CISO) — Contract

Location: Ventura County Area, California
Work Arrangement: Hybrid — approximately 3 days onsite per week
Position Type: Contract Consulting Engagement
Industry: Healthcare

Position Overview

We are recruiting an experienced Chief Information Security Officer (CISO) for a consulting engagement with a major Southern California healthcare organization.

We are seeking a cybersecurity executive who combines strong operational security expertise with strategic leadership, sound judgment, and exceptional relationship management skills.

The successful candidate will lead enterprise cybersecurity programs, oversee IT risk and regulatory compliance, and work collaboratively with executives, clinical leadership, compliance professionals, and technology teams.

This is a hands-on leadership opportunity requiring both technical depth and the ability to translate cybersecurity priorities into practical business and clinical outcomes.

Key Responsibilities

Cybersecurity Leadership and Operations

• Develop and execute a multiyear cybersecurity strategy and improvement roadmap.

• Oversee security operations, threat monitoring, incident response, vulnerability management, and ransomware preparedness.

• Direct security initiatives involving infrastructure, cloud services, identity management, clinical systems, medical devices, and emerging technologies.

• Establish cybersecurity metrics, performance dashboards, and executive reporting.

Enterprise Risk and Compliance

• Lead technology risk assessments, security control evaluations, and regulatory compliance initiatives.

• Oversee HIPAA security requirements and coordinate remediation of technology-related compliance findings.

• Maintain enterprise technology risk registers, corrective-action plans, and documented remediation processes.

• Coordinate cybersecurity audits, regulatory responses, investigations, and evidence-based closure of findings.

Executive and Cross-Functional Collaboration

• Build effective relationships with executive leadership, Compliance, Privacy, clinical operations, and IT teams.

• Translate complex technical risks into clear recommendations and actionable priorities.

• Coordinate cybersecurity and risk remediation across multiple technical and operational stakeholders.

• Lead security personnel and external service providers, establish priorities, and oversee program delivery.

• Balance patient safety, regulatory compliance, operational continuity, and cybersecurity objectives.

Required Qualifications

• Bachelor's degree in cybersecurity, information technology, computer science, healthcare administration, business, or a related field.

• Minimum 10 years of progressive IT, cybersecurity, or technology risk management experience.

• At least 5 years leading cybersecurity teams, programs, or enterprise security initiatives.

• Demonstrated experience building or improving enterprise cybersecurity programs.

• Strong operational knowledge of security monitoring, incident response, identity and access management, security architecture, and risk management.

• Experience coordinating complex technology projects, regulatory remediation, and cross-functional initiatives.

• Exceptional executive communication, stakeholder management, and collaborative leadership skills.

Preferred Qualifications

• Cybersecurity leadership experience within healthcare organizations.

• Knowledge of HIPAA Security requirements, NIST Cybersecurity Framework, clinical technologies, and electronic health record environments.

• Public-sector or similarly complex enterprise experience.

• CISSP, CISM, CISA, CRISC, HCISPP, or comparable professional certification.

• Advanced degree in a relevant discipline.

Engagement Details

This contract position requires regular interaction with executive leadership, technology teams, and operational stakeholders.

Candidates should be available for approximately three onsite days per week, with potential flexibility once established in the engagement.

This is not a contract-to-hire arrangement. A future permanent opportunity may become available through a separate competitive recruitment process, but no permanent position is guaranteed.

All your information will be kept confidential according to EEO guidelines.