What are the responsibilities and job description for the Director Cyber Security Architect & Eng: Corporate Information Security position at Hoag Health System?
Job Description
Primary Duties And Responsibilities
The Director of Cyber Security Architecture & Engineering leads the security, architecture, operations and engineering functions at Hoag. Reporting to the CISO, this role defines and develops, implements the enterprise security tactical plan across network, identity, and infrastructure to reduce risk and prevent breaches. The Director manages a team of engineers and architects, collaborates with IT and business leaders, and ensures that security controls align with business objectives and regulatory requirements. Responsibilities include input into strategic cybersecurity vision, overseeing budget and vendor relations, and developing secure-by-design solutions that support innovation.
Responsibilities
Strategy, Architecture & Engineering Leadership
Education and Experience
Education And Experience
Bachelor’s degree in Cyber Security, Computer Science, Computer Information Systems, Engineering, Business, or a related technical field is required, Masters preferred; however, equivalent work experience may substitute for this requirement.
Applicants should have at least seven years of experience in cyber security, security architecture, or security engineering, with a strong background in leading teams responsible for designing, deploying, and maintaining security solutions within regulated industries. Hands-on management experience with frameworks such as PCI, HIPAA, and HITECH, CIS, NIST CSF 2.0 is essential.
The role involves overseeing teams that architect, engineer, and operate IAM, endpoint security, SIEM, cloud, network, data, DevOps, and virtualization solutions. Key responsibilities include driving strategy, integration, and implementation plans for cybersecurity capabilities across both on-premises and cloud environments, ensuring secure and trusted platforms.
Experience working in hospitals or healthcare organizations of comparable size and complexity is preferred. Candidates should be skilled at reviewing and improving standard operating procedures, systems requirements, and documentation.
Candidates must demonstrate deep expertise through leadership and a solid understanding of business processes, cybersecurity strategies, budgeting, and resource management. Experience managing multiple cloud service providers, such as AWS, Azure, and GCP, is also required.
The ability to anticipate future technological and business developments to proactively plan and implement solutions is important. Additional duties include analyzing and enhancing existing security programs and providing technical leadership and training to other security professionals.
Strong oral and written communication skills are expected, along with robust management abilities, effective time management, and prioritization to meet obligations promptly.
License Required
Hoag Memorial Hospital Presbyterian is a nonprofit regional health care delivery network in Orange County, California, consisting of three acute-care hospitals with sixteen urgent care centers, eleven health centers and a network of more than1,800 physicians, 100 allied health members, 8,000 employees, and 2,000 volunteers. More than 30,000 inpatients and 550,000 outpatients choose Hoag each year.
For over 70 years, Hoag has delivered a level of personalized care that is unsurpassed among Orange County’s health care providers. Since 1952, Hoag has served the local communities and continues its mission to provide the highest quality health care services through the core strategies of quality and service, people, physician partnerships, strategic growth, financial stewardship, community benefit and philanthropy.
Hoag offers a comprehensive blend of health care services including six institutes providing specialized care in the areas of cancer, heart and vascular, neurosciences, women's health, orthopedics, and digestive health through our institutes.
Hoag was the highest ranked hospital in Orange County in the 2024-2025 U.S. News &World Report, the only Orange County hospital ranked in the top 10 for California. The organization was ranked the #5 hospital in the Los Angeles Metro Area and the #10 hospital in California.
To learn more about Hoag’s awards and accreditations, visit: https://www.hoag.org/about-hoag/awards-accreditations/ .
Hoag is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind. Hoag is committed to the principle of equal employment opportunity for all employees and providing employees with a work environment free of discrimination and harassment. Hoag hires a diverse group of people in a manner that allows them to reach their full potential in the pursuit of organizational objectives.
Primary Duties And Responsibilities
The Director of Cyber Security Architecture & Engineering leads the security, architecture, operations and engineering functions at Hoag. Reporting to the CISO, this role defines and develops, implements the enterprise security tactical plan across network, identity, and infrastructure to reduce risk and prevent breaches. The Director manages a team of engineers and architects, collaborates with IT and business leaders, and ensures that security controls align with business objectives and regulatory requirements. Responsibilities include input into strategic cybersecurity vision, overseeing budget and vendor relations, and developing secure-by-design solutions that support innovation.
Responsibilities
Strategy, Architecture & Engineering Leadership
- Define and evolve the enterprise cybersecurity architecture and engineering roadmap aligned with organizational strategy, regulatory requirements, and risk tolerance.
- Lead the design and implementation of security architectures across cloud, network, identity, endpoint, application, and infrastructure environments.
- Ensure security is embedded into enterprise architecture standards, technology platforms, and solution designs using secure‑by‑design and Zero Trust principles.
- Provide architectural oversight and technical direction for major technology initiatives and digital transformation programs.
- Oversee security operations, encompassing vulnerability management processes as well as the creation and coordination of tabletop exercises to ensure preparedness for incident response.
- Maintain up-to-date understanding and architectural supervision of essential technology partners, including but not limited to the Microsoft security and identity suite such as Entra ID (Azure AD), DLP, Conditional Access, MFA, Identity Governance, Defender, Sentinel, and related platforms.
- Lead the architecture and engineering strategy for Identity & Access Management (IAM), including authentication, authorization, privileged access, identity governance, and lifecycle management.
- Partner with infrastructure, cloud, and application teams to ensure identity‑centric security controls are consistently implemented.
- Manage the cybersecurity architecture and engineering budget, including annual budget planning, forecasting, and ongoing financial oversight.
- Develop multi‑year investment plans that align cybersecurity spend with risk reduction, maturity goals, and business priorities.
- Oversee vendor selection, contract management, and cost optimization for tools and services within scope.
- Lead, mentor, and develop a team of cybersecurity architects and engineers; establish performance goals and foster a culture of accountability and continuous improvement.
- Collaborate cross‑functionally with IT, Digital, Infrastructure, Cloud, Application, GRC, and Operations teams to drive integrated security outcomes.
- Serve as a trusted advisor to senior leaders on security architecture, engineering trade‑offs, and emerging risks.
Education and Experience
Education And Experience
Bachelor’s degree in Cyber Security, Computer Science, Computer Information Systems, Engineering, Business, or a related technical field is required, Masters preferred; however, equivalent work experience may substitute for this requirement.
Applicants should have at least seven years of experience in cyber security, security architecture, or security engineering, with a strong background in leading teams responsible for designing, deploying, and maintaining security solutions within regulated industries. Hands-on management experience with frameworks such as PCI, HIPAA, and HITECH, CIS, NIST CSF 2.0 is essential.
The role involves overseeing teams that architect, engineer, and operate IAM, endpoint security, SIEM, cloud, network, data, DevOps, and virtualization solutions. Key responsibilities include driving strategy, integration, and implementation plans for cybersecurity capabilities across both on-premises and cloud environments, ensuring secure and trusted platforms.
Experience working in hospitals or healthcare organizations of comparable size and complexity is preferred. Candidates should be skilled at reviewing and improving standard operating procedures, systems requirements, and documentation.
Candidates must demonstrate deep expertise through leadership and a solid understanding of business processes, cybersecurity strategies, budgeting, and resource management. Experience managing multiple cloud service providers, such as AWS, Azure, and GCP, is also required.
The ability to anticipate future technological and business developments to proactively plan and implement solutions is important. Additional duties include analyzing and enhancing existing security programs and providing technical leadership and training to other security professionals.
Strong oral and written communication skills are expected, along with robust management abilities, effective time management, and prioritization to meet obligations promptly.
License Required
- Current CA driver’s license required for local travel
- One or more of the following certifications is required:
- GIAC Security Leadership (GSLC) or
- Certified Information Systems Security Professional (CISSP) or
- Certified Information Security Manager (CISM)
Hoag Memorial Hospital Presbyterian is a nonprofit regional health care delivery network in Orange County, California, consisting of three acute-care hospitals with sixteen urgent care centers, eleven health centers and a network of more than1,800 physicians, 100 allied health members, 8,000 employees, and 2,000 volunteers. More than 30,000 inpatients and 550,000 outpatients choose Hoag each year.
For over 70 years, Hoag has delivered a level of personalized care that is unsurpassed among Orange County’s health care providers. Since 1952, Hoag has served the local communities and continues its mission to provide the highest quality health care services through the core strategies of quality and service, people, physician partnerships, strategic growth, financial stewardship, community benefit and philanthropy.
Hoag offers a comprehensive blend of health care services including six institutes providing specialized care in the areas of cancer, heart and vascular, neurosciences, women's health, orthopedics, and digestive health through our institutes.
Hoag was the highest ranked hospital in Orange County in the 2024-2025 U.S. News &World Report, the only Orange County hospital ranked in the top 10 for California. The organization was ranked the #5 hospital in the Los Angeles Metro Area and the #10 hospital in California.
To learn more about Hoag’s awards and accreditations, visit: https://www.hoag.org/about-hoag/awards-accreditations/ .
Hoag is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind. Hoag is committed to the principle of equal employment opportunity for all employees and providing employees with a work environment free of discrimination and harassment. Hoag hires a diverse group of people in a manner that allows them to reach their full potential in the pursuit of organizational objectives.