Senior Level Information Security Officer Jobs
Senior level information security officer jobs place experienced professionals in charge of enterprise security strategy, program ownership, and the cross-functional teams that implement and enforce it. Hiring is concentrated across Insurance, Healthcare & Medical Services, and Education, with a mix of on-site, hybrid, and remote opportunities, and employers like Hippo Insurance, Sysco, and Holman hiring at this level now.
Find JobsOverview
Showing 5 of 14+ Senior Level Information Security Officer jobs
Full-time / Benefits eligible
Location 1077 Gorge Blvd, Akron, OH 44310
Summa Health System is recognized as one of the region’s top employers by a number of third party organizations, including NorthCoast 99. Exceptional candidates gravitate to Summa because of its culture, passion for delivering excellent service to our patients and families, commitment to our philosophy of servant leadership, collegial working relationships at every level of the organization, and competitive pay and benefits.
Summary:
Under general direction of the CIO, the CISO is a senior executive accountable for building, owning, and delivering Summa Health System’s enterprise cybersecurity program across both the health system and the SummaCare health plan. This is a delivery role: the CISO authors strategy, holds direct accountability for architecture and implementation, and manages cybersecurity risk to acceptable levels aligned with business objectives.
The CISO maintains ongoing technical currency — including on the AI threat surface, cloud platforms, and emerging attack vectors — and applies it pragmatically in support of patient care, business operations, and regulatory obligations. The dual provider-and-payer mandate is defining: the CISO must be fluent in HIPAA Security Rule compliance, OCR audit readiness, and health plan obligations including Ohio Department of Insurance requirements, and serves as designated Information Security Official for Summa Health pursuant to 45 CFR Subchapter C, Section 164.308(a)(2).
Minimum Qualifications:
-
Formal Education Required:
Bachelor’s Degree in Computer Science, Information Systems, Cybersecurity, Business Administration, or related field — or equivalent combination of education and experience. Advanced degree (MS, MBA, or equivalent) preferred. -
Experience and Training Required:
Ten (10) + years of progressive information security experience, with at least five (5) in a senior leadership role carrying direct delivery accountability — not solely advisory or governance. Healthcare experience required, with demonstrated understanding of EHR platforms (Epic preferred), HL7/FHIR, EDI, and clinical workflow constraints affecting security program design. -
Certifications required:
Three (3) current, non-lapsed certifications, with at least one being a cloud security certification or recognized equivalent. Accepted certifications listed below under Certifications preferred. -
Certifications preferred:
ISC2 Certified Information Systems Security Professional (CISSP), ISC2 Certified Cloud Security Professional (CCSP), ISACA Certified Information Security Manager (CISM), ISC2 Healthcare Information Security and Privacy Practitioner (HCISPP) -
Other Skills, Competencies and Qualifications:
Advanced knowledge of how cybersecurity capabilities support foundational business and clinical/operational workflows, including EHR platforms, interoperability standards (HL7/FHIR, EDI 834/837), and hybrid on-premises and cloud environments (IaaS, PaaS, SaaS).
Advanced knowledge of cybersecurity governance frameworks (NIST CSF, HITRUST, HIPAA Security Rule, PCI DSS, COBIT, ITIL), information assurance principles (confidentiality, integrity, availability, authenticity, non-repudiation), and risk management processes including cyber threats, vulnerabilities, incident response, IT Change Management, and Business Continuity.
Advanced knowledge of third-party and vendor risk management (outsourced service assessment, contractual security requirements, Business Associate oversight); and IT budget, planning, forecasting, and financial management to justify security investments by risk reduction and business impact.
Working knowledge of emerging technology risk domains — including analytics, generative AI, and agentic AI workflows — and the ability to evaluate and integrate safeguards for data protection, misuse, and regulatory risk.
- Level of Physical Demands:
Sedentary: Exerts up to ten pounds of force occasionally and/or a negligible amount of force frequently.
Compensation:
$97.02/hr - $145.53/hr
The salary range on this job posting/advertising is base salary exclusive of any bonuses or differentials. Many factors, such as years of relevant experience and geographical location are considered when determining the starting rate of pay. We believe in the importance of pay equity and consider internal equity of our current team members when determining offers. Please keep in mind that the range that is listed is the full base salary range. Hiring at the maximum of the range would not be typical.
Summa Health offers a competitive and comprehensive benefits program to include medical, dental, vision, life, paid time off as well as many other benefits.
- Basic Life and Accidental Death & Dismemberment (AD&D)
- Supplemental Life and AD&D
- Dependent Life Insurance
- Short-Term and Long-Term Disability
- Accident Insurance, Hospital Indemnity, and Critical Illness
- Retirement Savings Plan
- Flexible Spending Accounts – Healthcare and Dependent Care
- Employee Assistance Program (EAP)
- Identity Theft Protection
- Pet Insurance
- Education Assistance
- Daily Pay
Equal Opportunity Employer/Veterans/Disabled
Full-time / Benefits eligible
Location 1077 Gorge Blvd, Akron, OH 44310
Summa Health System is recognized as one of the region’s top employers by a number of third party organizations, including NorthCoast 99. Exceptional candidates gravitate to Summa because of its culture, passion for delivering excellent service to our patients and families, commitment to our philosophy of servant leadership, collegial working relationships at every level of the organization, and competitive pay and benefits.
Summary:
Under general direction of the CIO, the CISO is a senior executive accountable for building, owning, and delivering Summa Health System’s enterprise cybersecurity program across both the health system and the SummaCare health plan. This is a delivery role: the CISO authors strategy, holds direct accountability for architecture and implementation, and manages cybersecurity risk to acceptable levels aligned with business objectives.
The CISO maintains ongoing technical currency — including on the AI threat surface, cloud platforms, and emerging attack vectors — and applies it pragmatically in support of patient care, business operations, and regulatory obligations. The dual provider-and-payer mandate is defining: the CISO must be fluent in HIPAA Security Rule compliance, OCR audit readiness, and health plan obligations including Ohio Department of Insurance requirements, and serves as designated Information Security Official for Summa Health pursuant to 45 CFR Subchapter C, Section 164.308(a)(2).
Minimum Qualifications:
-
Formal Education Required:
Bachelor’s Degree in Computer Science, Information Systems, Cybersecurity, Business Administration, or related field — or equivalent combination of education and experience. Advanced degree (MS, MBA, or equivalent) preferred. -
Experience and Training Required:
Ten (10) + years of progressive information security experience, with at least five (5) in a senior leadership role carrying direct delivery accountability — not solely advisory or governance. Healthcare experience required, with demonstrated understanding of EHR platforms (Epic preferred), HL7/FHIR, EDI, and clinical workflow constraints affecting security program design. -
Certifications required:
Three (3) current, non-lapsed certifications, with at least one being a cloud security certification or recognized equivalent. Accepted certifications listed below under Certifications preferred. -
Certifications preferred:
ISC2 Certified Information Systems Security Professional (CISSP), ISC2 Certified Cloud Security Professional (CCSP), ISACA Certified Information Security Manager (CISM), ISC2 Healthcare Information Security and Privacy Practitioner (HCISPP) -
Other Skills, Competencies and Qualifications:
Advanced knowledge of how cybersecurity capabilities support foundational business and clinical/operational workflows, including EHR platforms, interoperability standards (HL7/FHIR, EDI 834/837), and hybrid on-premises and cloud environments (IaaS, PaaS, SaaS).
Advanced knowledge of cybersecurity governance frameworks (NIST CSF, HITRUST, HIPAA Security Rule, PCI DSS, COBIT, ITIL), information assurance principles (confidentiality, integrity, availability, authenticity, non-repudiation), and risk management processes including cyber threats, vulnerabilities, incident response, IT Change Management, and Business Continuity.
Advanced knowledge of third-party and vendor risk management (outsourced service assessment, contractual security requirements, Business Associate oversight); and IT budget, planning, forecasting, and financial management to justify security investments by risk reduction and business impact.
Working knowledge of emerging technology risk domains — including analytics, generative AI, and agentic AI workflows — and the ability to evaluate and integrate safeguards for data protection, misuse, and regulatory risk.
- Level of Physical Demands:
Sedentary: Exerts up to ten pounds of force occasionally and/or a negligible amount of force frequently.
Compensation:
$97.02/hr - $145.53/hr
The salary range on this job posting/advertising is base salary exclusive of any bonuses or differentials. Many factors, such as years of relevant experience and geographical location are considered when determining the starting rate of pay. We believe in the importance of pay equity and consider internal equity of our current team members when determining offers. Please keep in mind that the range that is listed is the full base salary range. Hiring at the maximum of the range would not be typical.
Summa Health offers a competitive and comprehensive benefits program to include medical, dental, vision, life, paid time off as well as many other benefits.
- Basic Life and Accidental Death & Dismemberment (AD&D)
- Supplemental Life and AD&D
- Dependent Life Insurance
- Short-Term and Long-Term Disability
- Accident Insurance, Hospital Indemnity, and Critical Illness
- Retirement Savings Plan
- Flexible Spending Accounts – Healthcare and Dependent Care
- Employee Assistance Program (EAP)
- Identity Theft Protection
- Pet Insurance
- Education Assistance
- Daily Pay
Equal Opportunity Employer/Veterans/Disabled
See All 14 Senior Level Information Security Officer Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsSenior Level Information Security Officer Job Market
Who's Hiring
Top Industries Hiring
- Insurance
- Healthcare & Medical Services
- Education
- Food & Beverage
- Technology & Software
Senior Level Information Security Officer Jobs: Frequently Asked Questions
How do I get a senior level information security officer job?
Employers at this level expect candidates who have owned security programs end to end, not just contributed to them. A strong portfolio shows policy development, incident response leadership, risk management, and cross-department collaboration. Certifications like CISSP or CISM carry weight, but what sets candidates apart is demonstrated ability to align security posture with business objectives and to mentor and develop junior practitioners.
Which companies hire senior level information security officers?
Companies hiring senior level information security officers right now include Hippo Insurance, Sysco, and Holman, based on current listings on Migrate Mate as of September 2026. Hiring at this level comes from large enterprises, government contractors, financial institutions, and healthcare organizations that require experienced security leadership to manage complex compliance and threat environments.
Are there remote senior level information security officer jobs?
Yes, though availability varies by employer and industry. About 45% of senior level information security officer openings are remote or hybrid as of September 2026, reflecting the continued demand for experienced security leaders who can operate effectively outside a central office. Roles tied to classified environments or on-premises infrastructure are more likely to require an on-site presence.
What makes an information security officer role senior level?
Senior level information security officer roles are defined by scope and ownership. Where mid-level roles focus on executing within established frameworks, senior roles involve setting those frameworks, making enterprise-wide risk decisions, and being accountable for outcomes. Expectations include leading security audits and incident response, advising executive leadership, shaping policy, and mentoring less experienced members of the security team.
Which industries hire the most senior level information security officers?
Senior level information security officer roles concentrate in Insurance, Healthcare & Medical Services, and Education, based on current listings on Migrate Mate as of September 2026. These sectors drive hiring because they operate under strict regulatory requirements, manage large volumes of sensitive data, and face elevated threat exposure that demands experienced, strategic security leadership.