About City of Hope
City of Hope is an independent biomedical research and treatment organization for cancer, diabetes and other life-threatening diseases.
Founded in 1913, City of Hope is a leader in bone marrow transplantation and immunotherapy such as CAR T cell therapy. City of Hope’s translational research and personalized treatment protocols advance care throughout the world. Human synthetic insulin, monoclonal antibodies and numerous breakthrough cancer drugs are based on technology developed at the institution. AccessHope™, a subsidiary launched in 2019 serves employers and their health care partners by providing access to City of Hope’s specialized cancer expertise.
A National Cancer Institute-designated comprehensive cancer center and a founding member of the National Comprehensive Cancer Network, City of Hope is ranked among the nation’s “Best Hospitals” in cancer by U.S. News & World Report and received Magnet Recognition from the American Nurses Credentialing Center. Its main campus is located near Los Angeles, with additional locations throughout Southern California and in Arizona.

City of Hope’s commitment to Diversity, Equity and Inclusion
We believe diversity, equity and inclusion is key in serving our mission to provide compassionate patient care, drive innovative discovery, and advance vital education focused on eliminating cancer and diabetes in all of our communities. Our commitment to Diversity, Equity and Inclusion ensures we bring the full range of skills, perspectives, cultural backgrounds and experiences to our work -- and that our teams align with the people we serve in order to build trust and understanding. We are dedicated to fostering a community that embraces diversity - in ideas, backgrounds and perspectives; this is reflected in our work and represented in our people.

Position Summary
Provide overall direction, planning and implementation of enterprise information technology cyber security systems across all of City of Hope’s entities. Foster an environment that demonstrates to employees, physicians, and patients that security is of paramount importance, is dealt with in an initiative-taking manner and that critical information is properly safeguarded.

Key Responsibilities include:

• Develop and architect an enterprise-wide cyber security infrastructure program that will ensure the integrity, reliability, privacy, and availability of information and systems.
• Provide oversight of the planning, design and implementation, security systems and software, including firewalls, VPNs, intrusion detection/prevention systems, cryptographic systems, biometrics, anti-malware vulnerability management, and patch management software.
• Define and implement programs related to network security, data encryption, desktop and server baselines, anti-virus and patch management, and user provisioning/deprovisioning.
• Participate with information security in HIPAA gap analyses which include a review of administrative, physical, and technical safeguards, including documentation and systems.
• Prepare the cyber security portion of the organization’s incident response, ransomware, disaster recovery, and business continuity plan for information technology.
• Implement, and enforce policies and procedures per the Information Security office that comply with HIPAA, GLBA, and PCI.
• Participate in both internal and external audits and the develop of management action plans in response to cyber security defenses and related threats as needed.
• Ensure compliance to security standards and best practices for new applications and infrastructures by reviewing/auditing applications, systems, and networks in conjunction with corporate compliance, and information security
• Manage cyber security infrastructure tools and respond to security incidents.
• Implement and enforce internal control systems to ensure the appropriate information access levels are in place.
• Monitor changes in legislation and accreditation standards that affect cyber security.
• Manage and provide professional development to the City of Hope IT cyber security staff consisting of a Manager and several Data Security Analysts.
• Performs other related duties as assigned or requested.

Basic education, experience and skills required for consideration:

• Bachelor’s degree in related discipline plus 7 years of experience with business continuity planning, auditing, risk management, and contract/vendor negotiations with a minimum of 5 years in a leadership capacity

**OR**

• 10 years of experience with business continuity planning, auditing, risk management, and contract/vendor negotiations with a minimum of 5 years in a leadership capacity

Preferred education experience and skills:

• Master’s Degree in Public Administration, area of assignment, Business Administration, or related field.
• Knowledge of cyber security auditing and risk management.
• Knowledge of business continuity planning.
• Demonstrated skill in performing complex cyber security analyses.
• Ability to identify problems, evaluate alternatives, and implement effective solutions.
• Superior communication skills, both verbal and written with demonstrated skills in presenting information to executive level management audiences.
• Knowledge of SIEM, IPS/IDS, VPN, Active Directory, Malware Analysis, Penetration Testing, UNIX/Linux, Wireshark, Net Witness, Firewalls, and APT Methodologies.

Additional Information:
As a condition of employment, City of Hope requires staff to comply with all state and federal vaccination mandates.