• Designs and maintains enterprise security architecture aligned with business, clinical, and IT strategies to safeguard systems and data.  

• Creates and maintains a multi-year security roadmap that prioritizes initiatives, aligns with organizational goals, and adapts to emerging threats and technologies.  

• Develops reference architectures and security blueprints for the secure deployment of applications, infrastructure, and hybrid/cloud environments.  

• Leads security architecture reviews for IT projects, EMR systems, medical/IoT devices, and third-party solutions to ensure secure-by-design principles.  

• Ensures compliance with healthcare regulations such as HIPAA, HITECH, HITRUST, and NIST CSF by embedding security controls into technical solutions.  

• Supports risk assessments and vulnerability management efforts by delivering mitigation strategies and secure architectural recommendations.  

• Architects infrastructure and cloud security solutions across on-prem, hybrid, and cloud environments, including secure remote access and segmentation.  

• Designs and implements IAM strategies including MFA, SSO, RBAC, and privileged identity management to enforce least-privilege access models.  

• Acts as a cybersecurity subject matter expert (SME) for leadership and technical teams, providing guidance on threats, tools, and best practices.  

• Collaborates cross-functionally and mentors junior staff, contributing to a security-first culture while supporting on-call rotations for 24/7 system needs.  

• Models the principles of a Just Culture and Organizational Values.  

• Performs other duties as assigned. Must be HIPAA compliant 

• Five years of experience in Information Technology required (multiple areas preferred).  

• Three years of experience in healthcare information security preferred.  

• Demonstrated knowledge of Network Hardware Configuration, Network Protocols, Information Security requirements for healthcare, and policy creation required.  

• Demonstrated knowledge of EMR products preferred.  
   

• N/A

• Certified Information Systems Security Professional (CISSP) required 

• Other IT Security Certifications Desired: CISM, CISA, Microsoft, Cisco

• Must possess, or be able to obtain within 90 days, the computer skills necessary to complete online learning requirements for job-specific competencies, access online forms and policies, complete online benefits enrollment, etc.  

• Bachelor's degree in computer science or information systems preferred.  

The posted salary range for this position applies to Colorado and may be adjusted based on geographic location. Vail Health considers a variety of factors in making compensation decisions, including but not limited to experience, education, licensure and/or certifications, geographic location, market demand and other business and organizational needs. 

Benefits at Vail Health (Full Time) Include:

• Competitive Wages & Family Benefits:
  • Competitive wages
  • Parental leave (4 weeks paid)
  • Housing programs
  • Childcare reimbursement 
• Comprehensive Health Benefits: 
  • Medical
  • Dental 
  • Vision
• Educational Programs: 
  • Tuition Assistance 
  • Existing Student Loan Repayment
  • Specialty Certification Reimbursement
  • Annual Supplemental Educational Funds
• Paid Time Off:
  • Up to five weeks in your first year of employment and continues to grow each year.
• Retirement & Supplemental Insurance:
  • 403(b) Retirement plan with immediate matching 
  • Life insurance
  • Short and long-term disability
• Recreation Benefits, Wellness & More:
  • Up to $1,000 annual wellbeing reimbursement
  • Recreation discounts
  • Pet insurance

About Vail Health

Vail Health, formerly Vail Valley Medical Center, is a nonprofit community health care system serving patients and guests from around the world. Locally operated and governed by a volunteer board of directors, Vail Health includes a 56-bed hospital, accredited by the Joint Commission. Our 24/7 emergency department in Vail is a Level III Trauma Center with a nearby helipad for necessary medical transports. Vail Health provides a wide array of services and access points including Beaver Creek Medical Center, urgent care clinics in Avon and Gypsum, our Edwards medical campus, Eagle Healthcare Center and a multispecialty clinic in Frisco. Howard Head Sports Medicine offers physical therapy services at 10 locations and works closely with our internationally renowned orthopaedic partners at The Steadman Clinic and Vail-Summit Orthopaedics. In addition, Vail Health's Shaw Cancer Center and Sonnenalp Breast Center are the region’s only fully accredited cancer treatment center and comprehensive breast center. The Vail Clinic, which was founded in 1965, officially became “Vail Valley Medical Center” in 1980, its first year as a full-service hospital. At that time, we had one primary locatio...n and 25 physicians. Today, Vail Health has locations in nine towns, nearly 1,000 employees, 260 physician partners and 85 volunteers. Vail Health is an equal-opportunity employer. The hospital is handicap accessible and adheres to the Americans with Disabilities Act. Smoking is prohibited in our facilities. This includes e-cigarettes.

Show more

Show less

Connections working at Vail Health