Manager - IS Information Security GRC

One of the nation's largest and most respected providers of hospital and healthcare services, Universal Health Services, Inc. (NYSE: UHS) has built an impressive record of achievement and performance. Growing steadily since its inception into an esteemed Fortune 300 corporation, annual revenues were $15.8 billion in 2024. During the year, UHS was again recognized as one of the World's Most Admired Companies by Fortune; and listed in Forbes ranking of America's Largest Public Companies. Headquartered in King of Prussia, PA, UHS has approximately 99,000 employees and continues to grow through its subsidiaries. Operating acute care hospitals, behavioral health facilities, outpatient facilities and ambulatory care access points, an insurance offering, a physician network and various related services located all over the U.S. States, Washington, D.C., Puerto Rico and the United Kingdom. www.uhs.com

The Information Services Department is seeking a dynamic and talented Manager - IS Information Security GRC.

The Manager - IS Information Security GRC (Governance, Risk, & Compliance) manages the deployments and support of the Governance, Risk, and Compliance (GRC) program that supports the security of electronic information, systems, and processes across all Corporate, BH and Acute Hospitals. Leads and supervises GRC staff and resources to execute program activities and initiatives in alignment with the organization's Information Security Management Systems, established policies, and regulatory requirements.

Key responsibilities include:

• Provides management of the implementation and ongoing support of corporate owned information security applications and security controls.
• Participates in leading security compliance (e.g., PCI compliance) initiatives to clearly identify control objectives and work with other teams to exceed audit objectives.
• Exercises responsibility for supervision, performance evaluations and direction of team. Coordinates work assignments given in order to meet deadlines and ensure continued progress toward assignment completion.
• Works with CISO to identify current and emerging threats to our systems and environment to prevent incidents where possible and actively manage them as necessary.
• Works closely with CISO and other senior level personnel to further enhance and develop their leadership skills.
• Continually evaluates the security posture of cloud environments against internal policy, regulatory requirements and industry best practices.

Position Requirements:

• 5-8 years of progressive information security experience that includes 1-3 years management experience and / or 3 years of direct Information Security experience in a multi-facility Acute and BH Hospital environment. Healthcare industry experience preferred.
• Bachelor's degree required.
• Strong technical analytical skills, project management certification and/or experience, process improvement related to workflow processes, training, development of educational material.
• Proven knowledge and experience developing and implementing a cybersecurity risk management framework based on regulations such as HIPAA or SOX and best practices as defined in NIST, ISO, PCI, and other common cybersecurity frameworks.
• Able to communicate clearly and respectfully with Executives, and all other personnel.
• Strong process and technology analysis skills.
• Ability to prioritize and balance multiple projects, priorities, or objectives.
• Learns quickly, takes constructive feedback on performance, stays focused on the job with attention to detail and produces desired outcomes.

Travel Requirements: Up to 10% US.

This opportunity provides the following:

• Challenging and rewarding work environment
• Growth and development opportunities within UHS and its subsidiaries
• Competitive Compensation
• Excellent Medical, Dental, Vision and Prescription Drug Plan
• 401k plan with company match
• Generous Paid Time Off

*UHS is a registered trademark of UHS of Delaware, Inc., the management company for Universal Health Services, Inc. and a wholly-owned subsidiary of Universal Health Services, Inc. Universal Health Services, Inc. is a holding company and operates through its subsidiaries including its management company, UHS of Delaware, Inc. All healthcare and management operations are conducted by subsidiaries of Universal Health Services, Inc. To the extent any reference to "UHS or UHS facilities" on this website including any statements, articles or other publications contained herein relates to our healthcare or management operations it is referring to Universal Health Services' subsidiaries including UHS of Delaware. Further, the terms "we," "us," "our" or "the company" in such context similarly refer to the operations of Universal Health Services' subsidiaries including UHS of Delaware. Any employment referenced in this website is not with Universal Health Services, Inc. but solely with one of its subsidiaries including but not limited to UHS of Delaware, Inc.

UHS is not accepting unsolicited assistance from search firms for this employment opportunity. Please, no phone calls or emails. All resumes submitted by search firms to any employee at UHS via-email, the Internet or in any form and/or method without a valid written search agreement in place for this position will be deemed the sole property of UHS. No fee will be paid in the event the candidate is hired by UHS as a result of the referral or through other means.

EEO Statement

All UHS subsidiaries are committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and teammates. UHS subsidiaries are equal opportunity employers and as such, openly support and fully commit to recruitment, selection, placement, promotion and compensation of individuals without regard to race, color, religion, age, sex (including pregnancy, gender identity, and sexual orientation), genetic information, national origin, disability status, protected veteran status or any other characteristic protected by federal, state or local laws.

We believe that diversity and inclusion among our teammates is critical to our success.

Notice

At UHS and all our subsidiaries, our Human Resources departments and recruiters are here to help prospective candidates by matching skillset and experience with the best possible career path at UHS and our subsidiaries. We take pride in creating a highly efficient and best in class candidate experience. During the recruitment process, no recruiter or employee will request financial or personal information (Social Security Number, credit card or bank information, etc.) from you via email. The recruiters will not email you from a public webmail client like Hotmail, Gmail, Yahoo Mail, etc. If you are suspicious of a job posting or job-related email mentioning UHS or its subsidiaries, let us know by contacting us at: https://uhs.alertline.com or 1-800-852-3449.