3 jobs found

Job Description Job Description OVERVIEW Hendall is currently seeking a Systems and Information Security Specialist experienced with the Federal Information Security Management Act (FISMA), U.S. Department of Health and Human Services (HHS), Office of Management and Budget (OMB), and the National Institute of Standards and Technology (NIST) regulations, policies, and guidelines. DUTIES The Systems and Information Security Specialist analyzes, defines, implements, and maintains all required procedures and security controls in accordance with Federal, and HHS regulations, policies, and guidelines. Specifically: Conduct Security Assessment and Authorization (SA&A) processes and procedures to attain Authorization To Operate (ATO) for supported information systemsRemediate security weaknesses through the implementation of Plan of Actions & Milestones (POA&Ms)Perform risk analyses which also includes risk assessment, mitigation and contingency planning.Develop and maintain information security policies, procedures and control techniques in accordance with FISMA and NIST Special Publications 800 SeriesDevelop and maintain BHSIS Information System Security Plan and IT PlanAssist with the preparation and maintenance of OMB required forms and other paperwork for major IT investmentsPerform periodic reviews to ensure compliance with existing information security and privacy requirements.Continuously monitor system(s) security controls and operational environmentComplete annual system self-assessments, and support quarterly and annual FISMA reporting requirementsConduct monthly Database, Application and Operating System vulnerability scans and report outcomes to clients' Chief Information System Officer (CISO)Perform annual penetration testing on client systems and provide test reports to clientsAct as liaison between clients' CISO and HendallMINIMUM QUALIFICATIONS Bachelor's degree in computer science, information systems or information technology3-5 years of professional experience in Federal IT SecurityCertified Information Systems Security Professional (CISSP) certification or similar (Preferred)Experience working in a Federal Information Processing Standard (FIP) 199 Moderate categorized system environmentStrong verbal and written communication skills Highly organized and detail oriented Ability to maintain and manage ATO-related controls and other information security artifactsPREFERRED QUALIFICATIONSExperience performing information security services within the Department of Health and Human Services and its operating divisions.Salary Range: $90,000/year to $110,000/yearFor a complete listing of benefits, please visit our careers page at Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

Vaco is hiring a Chief Information Officer (CIO) in Lombard, IL. Location: Lombard, IL (Chicago Area) On-Site About the Opportunity A leading transportation and mobility services organization is seeking a visionary and operationally focused Chief Information Officer (CIO) to lead enterprise-wide technology strategy, digital transformation, cybersecurity, and IT operations. Supporting a large-scale network of transportation services across hundreds of locations nationwide, this organization operates in a highly distributed, mission-critical environment where technology plays a central role in safety, service delivery, workforce productivity, and customer experience. Reporting directly to the Chief Executive Officer and serving as a member of the Executive Leadership Team, the CIO will be responsible for shaping the future technology landscape while ensuring operational excellence across all information technology functions. This executive will serve as a trusted business partner, driving innovation, modernization, and enterprise performance through strategic technology investment and disciplined execution. Position Overview The Chief Information Officer is responsible for developing and executing a comprehensive technology and digital strategy that supports business growth, operational efficiency, safety, and customer satisfaction. This leader will oversee all aspects of information technology, including enterprise applications, infrastructure, cybersecurity, data and analytics, field support services, project management, innovation, and vendor management. Success in this role requires a highly collaborative executive who combines strategic vision with hands-on leadership and a strong operational mindset. The ideal candidate will have experience leading technology organizations in complex, geographically dispersed environments where reliability, scalability, and service excellence are essential. Key Responsibilities Technology Strategy & Digital Transformation Define and execute a long-term technology roadmap aligned with business objectives and customer expectations. Lead enterprise-wide digital transformation initiatives that improve operational efficiency, safety, workforce effectiveness, and customer outcomes. Identify emerging technologies and innovation opportunities that create measurable business value. Serve as a strategic advisor to executive leadership on technology trends, risks, investments, and modernization priorities. Foster a culture that embraces innovation, continuous improvement, and digital adoption. IT Operations & Service Excellence Ensure the reliability, availability, and performance of technology systems supporting a large national operating network. Oversee IT service delivery and support functions, ensuring responsive and effective support for a 24/7 operational environment. Establish strong governance, service management disciplines, and performance metrics across the technology organization. Maintain operational continuity through resilient infrastructure, disaster recovery, and business continuity planning. Drive technology standardization and process optimization across multiple business locations. Enterprise Applications & Data Strategy Lead the strategy, optimization, and governance of enterprise technology platforms supporting operations, finance, human resources, scheduling, maintenance, safety, and customer-facing functions. Modernize legacy applications and streamline the overall technology architecture. Expand data analytics and reporting capabilities to support informed business decisions and operational performance. Promote the use of advanced analytics and business intelligence tools across the organization. Establish a strong data governance framework to ensure quality, consistency, accessibility, and security of enterprise data. Cybersecurity & Risk Management Develop and maintain a comprehensive cybersecurity strategy that protects critical systems, data, and operational assets. Strengthen security governance, risk management, and compliance capabilities. Oversee incident response, disaster recovery, and business continuity programs. Ensure technology practices meet applicable regulatory, legal, and industry requirements. Create a culture of security awareness and accountability throughout the organization. Leadership & Talent Development Build and lead a high-performing technology organization focused on collaboration, innovation, and results. Recruit, develop, and retain top technology talent. Partner closely with operational and corporate leaders to align technology solutions with business needs. Lead organizational change efforts that support successful technology adoption and business transformation. Encourage a customer-focused mindset and culture of accountability across the IT function. Financial, Vendor & Portfolio Management Manage technology budgets, capital investments, and resource allocation to maximize business value. Identify opportunities for cost optimization while maintaining high service levels. Oversee strategic technology vendors, contract negotiations, and supplier performance. Manage the enterprise technology project portfolio, ensuring prioritization, governance, and successful delivery. Establish clear ROI measures for technology investments and transformation initiatives. Qualifications Required Experience Executive-level technology leadership experience in a large, distributed, operationally intensive organization. Demonstrated success leading enterprise technology modernization and digital transformation programs. Significant experience managing mission-critical systems within complex, customer-facing operating environments. Proven track record of building high-performing teams and developing strong leadership benches. Strong business acumen with experience managing large budgets, strategic technology investments, and vendor ecosystems. Ability to influence senior stakeholders and lead effectively within a matrixed organizational structure. Preferred Experience Background in transportation, logistics, infrastructure, industrial services, utilities, field services, or similarly complex industries. Experience operating within multinational or globally integrated organizations. Familiarity with public-sector environments, regulatory compliance requirements, or transportation technologies. Experience overseeing cloud transformation, enterprise application modernization, and advanced analytics initiatives. Leadership Profile The successful candidate will demonstrate: Strategic thinking combined with disciplined execution. Strong business partnership and stakeholder management skills. Excellent communication and influencing capabilities. A pragmatic, hands-on leadership style. Strong operational awareness and customer focus. The ability to lead through change and transformation. High integrity, humility, accountability, and commitment to organizational success. By submitting to this position, you are agreeing to be included in our talent pool for future hiring for similarly qualified positions. EEO Notice Vaco by Highspring is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race (including but not limited to traits historically associated with race such as hair texture and hair style), color, sex (includes pregnancy or related conditions), religion or creed, national origin, citizenship, age, disability, status as a veteran, union membership, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, political affiliation, or any other protected characteristics as required by federal, state or local law. Vaco by Highspring and its parents, affiliates, and subsidiaries are committed to the full inclusion of all qualified individuals. As part of this commitment, Vaco by Highspring and its parents, affiliates, and subsidiaries will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact . Vaco by Highspring also wants all applicants to know their rights that workplace discrimination is illegal. Representation Notice By submitting to this position, you agree that you will be giving Vaco by Highspring the exclusive right to present your as a candidate for the foregoing employment opportunity. You further agree that you have represented information about yourself accurately and have not affirmatively misrepresented your qualifications. You also agree to maintain as confidential, to the fullest extent permitted by law, any information you learn from Vaco by Highspring about the position and you will limit disclosure of information about the position only to the extent necessary to perform any obligations in furtherance of your application. In exchange, Vaco by Highspring agrees to exercise reasonable efforts to represent you through all solicitation, job screening and resume dispersal. For residents of Ontario, Canada: Based on Highspring's discussions with its Client, Highspring's understanding is that this position for employment is a current vacancy (either through Highspring as a contractor or with the client directly). Privacy Notice Vaco by Highspring and its parents, affiliates, and subsidiaries ("we," "our," or "Vaco by Highspring") respects your privacy and are committed to providing transparent notice of our policies. California residents may access Vaco by Highspring HR Notice at Collection for California Applicants and Employees here. Virginia residents may access our state specific policies here. Residents of all other states may access our policies here . click apply for full job details

Job Summary The SVP, Global Chief Information Security Officer (CISO) & IT Governance is responsible for leading the organization's global cybersecurity strategy, governance model, risk management program, and cyber resilience capabilities. This executive provides strategic oversight of security operations, architecture, governance, compliance, regulatory readiness, audit coordination, incident response, and recovery. The role ensures cybersecurity is embedded into enterprise strategy, technology transformation, digital innovation, third-party relationships, and day-to-day operations, while serving as a trusted advisor to senior leadership, Board-level stakeholders, Legal, Compliance, Privacy, Internal Audit, regulators, auditors, customers, and external partners. Job Description Key Responsibilities Set and execute the enterprise cybersecurity strategy and multi-year roadmap aligned with business priorities, risk appetite, regulatory expectations, technology transformation, and enterprise growth. Analyze emerging cybersecurity and governance threats (including AI) and create remediation recommendations. Establish and mature the cyber governance model, including policies, standards, decision rights, executive reporting, escalation protocols, and accountability mechanisms. Lead global security operations, including threat monitoring, intelligence, incident detection, vulnerability management, identity and access management, endpoint security, cloud security, encryption, data protection, analytics, response, and recovery. Oversee security architecture and control design to embed security into technology platforms, cloud environments, data ecosystems, business applications, digital products, privileged access management, and Zero Trust initiatives. Lead Governance, Risk & Compliance (GRC) programs, including risk identification, assessment, prioritization, mitigation, acceptance, monitoring, reporting, policy governance, and compliance oversight. Integrate cybersecurity risk management into enterprise risk management, business planning, technology governance, third-party oversight, customer assurance, and major transformation initiatives. Oversee readiness for applicable laws, regulations, contractual obligations, supervisory expectations, industry standards, and frameworks such as NIST, ISO 27001, CIS Controls, GDPR, HIPAA, PCI DSS, HITRUST, SOX / ITGC, or other relevant requirements. Serve as the primary technology liaison to Legal, Compliance, Privacy, and Internal Audit on cybersecurity, regulatory, privacy, audit, contractual, and customer assurance matters. Lead cyber resilience planning, including incident response strategy, crisis escalation, executive communications, tabletop exercises, ransomware preparedness, recovery coordination, recovery validation, and lessons-learned governance. Advise executive leadership and Board-level stakeholders on cyber risk exposure, emerging threats, program maturity, investment priorities, strategic trade-offs, incident readiness, and regulatory disclosure considerations. Build, lead, and develop a high-performing global cybersecurity and IT governance organization with clear accountability, succession planning, talent development, operating rhythms, and measurable maturity improvements. Champion an enterprise culture in which cybersecurity is understood as a shared leadership responsibility and embedded into business decision-making. Scope of Accountability Global Cybersecurity Program Security Operations, Threat Intelligence & Incident Response Security Architecture & Engineering Identity & Access Management Governance Privileged Access Management Governance Governance, Risk & Compliance (GRC) HITRUST Certification Program PCI Compliance Program SOX / IT General Controls (ITGC) Technology Change Management Governance Cyber Resilience & Recovery Readiness Third-Party Security Assurance Legal, Compliance & Privacy Technology Coordination Executive, Audit Committee, and Board Cybersecurity Reporting Cybersecurity Strategy, Governance, Maturity Roadmap, Investment Prioritization & Enterprise Risk Reporting AI Security Risk Analysis / Threat Mitigation AI Risk Governance Leadership Expectations Operate as a strategic business executive balancing cybersecurity risk, compliance, privacy, technology governance, resilience, and operational priorities. Translate complex cyber, technology, and operational risks into business impact, financial exposure, regulatory implications, and strategic choices. Lead through ambiguity, manage high-pressure incidents, and communicate clearly with senior stakeholders during crisis situations. Influence without direct authority, drive cross-functional alignment, and enable pragmatic, risk-informed decisions. Promote a culture of accountability, resilience, cybersecurity awareness, and continuous improvement. Enable business growth through security leadership that supports innovation, operational resilience, and regulatory readiness. Maintain a mature global security and governance program that supports evolving business, technology, regulatory, customer, and audit requirements. Our benefit package includes health insurance, life and disability, 401(k) contributions, paid time off, etc., for employees working 30 or more hours per week on average. For a more comprehensive list of our benefits please click here. For roles where employees work less than 30 hours per week, benefits include 401(k) contributions as well as access to the Employee Assistance Program, Employee Resource Groups and the Employee Service Corp. We're dedicated to creating a Medline where everyone feels they belong and can grow their career. We strive to do this by seeking diversity in all forms, acting inclusively, and ensuring that people have tools and resources to perform at their best. Explore our Belonging page here. Medline Industries, LP is an equal opportunity employer. Medline evaluates qualified individuals without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, age, disability, neurodivergence, protected veteran status, marital or family status, caregiver responsibilities, genetic information, or any other characteristic protected by applicable federal, state, or local laws.