Director, Cybersecurity (Security Officer)

About this role

Overview

Unified is a nationwide community of providers, operations specialists and thought leaders who look for the greatest opportunities to impact every woman’s health, at every stage of their journeys. We are unparalleled in our scale and ability to adapt to address unmet and underserved needs. Through 815+ clinics, 23 IVF labs, nationwide telehealth capabilities and targeted case management, our 2,700+ independent, affiliated providers deliver comprehensive women’s health services and continuously work to implement methods and develop techniques or platforms that improve the healthcare experience. We remain focused on enabling the discovery of new ways for our affiliated providers to deliver the high-quality care experience women deserve, in the ways they most wish to receive it, and collaborate across our community to make our vision a reality.
The Cybersecurity Officer serves as the organization’s senior cybersecurity executive, responsible for advancing the enterprise cybersecurity strategy and operating model. Reporting to the Chief Information Officer, the role advises executive leadership and directs decisions involving cyber risk, information protection, technology resilience, regulatory readiness, and security investments. The position leads cybersecurity governance, risk management, security operations, incident response, regulatory compliance, third-party security risk, security architecture, and data protection, translating complex cyber risk into executive-level insight and integrating security into business strategy, technology planning, vendor management, and operational execution. The Cybersecurity Officer partners closely with infrastructure leadership to align strategy, architecture, priorities, shared resources, dependencies, and accountability across the technology environment. Leading across organizational boundaries, the role directs internal and external security resources, establishes measurable outcomes, and holds stakeholders accountable for a mature, risk-based security posture that protects information assets, supports business continuity, strengthens regulatory confidence, and preserves stakeholder trust.

Responsibilities

• Defines and leads the enterprise cybersecurity vision, strategy, operating model, roadmap, governance structure, policies, standards, and performance measures. Sets program direction in alignment with enterprise strategy, risk tolerance, technology priorities, regulatory obligations, and executive leadership expectations.

• Directs enterprise cybersecurity risk governance, including risk assessments, risk register oversight, control maturity evaluations, risk acceptance decisions, remediation prioritization, third-party/vendor security risk review, and executive-level reporting on material cyber risks, business impacts, trends, and mitigation strategies.

• Provides executive oversight of security operations and cyber defense capabilities, including threat detection, vulnerability management, endpoint/network/email/cloud security, identity and access management, monitoring, escalation processes, and sustained improvement of security controls, tools, services, and operational performance.

• Serves as the cybersecurity executive partner to IT, Legal, Compliance, Privacy, Internal Audit, Operations, and business leadership. Influences enterprise technology decisions, embeds security-by-design principles into major initiatives, and ensures cybersecurity considerations are integrated into strategic planning, architecture decisions, vendor solutions, and data protection practices.

• Builds and leads cybersecurity capability across people, process, technology, and external partnerships. Directs internal staff, matrixed stakeholders, managed service providers, consultants, and vendor partners; establishes goals, budgets, service expectations, performance metrics, resource plans, and leadership development priorities.

• Leads enterprise cybersecurity incident preparedness and response, including executive escalation protocols, incident response plans, tabletop exercises, investigation coordination, recovery support, post-incident reviews, and cross-functional decision-making with IT, Legal, Compliance, Privacy, Operations, and executive leadership.

• Owns cybersecurity compliance and audit readiness by ensuring appropriate controls, evidence, reporting, and remediation processes are in place for applicable regulatory, contractual, privacy, and security framework requirements, including HIPAA, HITECH, NIST, ISO 27001, HITRUST, PCI, SOX, or other applicable standards.

Additional Job Functions:

• Supports cybersecurity awareness, policy adoption, and training communications to promote employee understanding of information protection responsibilities.

• Participates in internal and external audits, regulatory reviews, cyber insurance assessments, client security questionnaires, and due diligence activities as requested.

• Monitors emerging cyber threats, security technologies, regulatory changes, and industry best practices to inform future program enhancements.

• Architects and secures IAM capabilities in support of over 18,000 identities across multiple affiliate regions and care center environments.

• Represents the cybersecurity function in governance committees, enterprise planning discussions, vendor reviews, and cross-functional workgroups as needed.

• Other duties as assigned.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Computer Science, Business Administration, Risk Management, or a related field required; Master’s degree in a related field preferred.

• Minimum of 10 years of progressive experience in cybersecurity, information security, technology risk management, IT audit, or related technology leadership roles required, including at least 5 years leading cybersecurity programs, teams, vendors, or enterprise security initiatives at a manager level or above.

•…