IT Security Governance Lead

Position Summary

Stony Brook Medicine is seeking an IT Governance Lead to drive enterprise identity governance, access control, and cloud security strategy. This senior role is responsible for defining and enforcing authorization models, identity governance frameworks, and privileged access controls across cloud and hybrid environments, including clinical platforms such as Oracle Health (Cerner).

This position serves as the information security authority for "who gets access and why," ensuring alignment with Zero Trust principles, least privilege, and regulatory requirements (HIPAA, NYS, SUNY, NIST) while partnering with Systems and Engineering teams for operational execution.

Duties of an IT Governance Lead may include the following but are not limited to:

• Establish and enforce cloud access governance policies (RBAC/ABAC)
• Design and oversee authorization models across cloud platforms (OCI and hybrid environments)
• Define and govern access controls for enterprise clinical systems (e.g., Oracle Health / Cerner)
• Lead access certification reviews and enforce least privilege principles
• Govern Privileged Access Management (PAM/PIM) strategy and controls
• Monitor identity risk signals and privileged account activity
• Align identity governance with HIPAA, NYS, SUNY, and NIST frameworks
• Partner with Architecture, Cloud, Application, and Clinical IT teams to ensure secure design
• Enforce segregation of duties (SoD) and access controls
• Determining who should have access and under what conditions
• Defining access control policies and governance standards
• Driving risk-based access decisions and control enforcement
• Ensuring audit readiness and regulatory compliance, including clinical system access

Collaboration with SBMIT Systems

• Conditional Access & MFA

• Defining governance & policy

• Access Provisioning

• Defines roles and approval requirements

• Access Reviews

• Owns certification process

• Identity Incident Response

• Leads investigation and strategy

• Logging & Monitoring

• Defines requirements and reviews anomalies

Operations

• Separation of authentication (Systems) and authorization (InfoSec)
• Independent governance over privileged and sensitive access, including clinical systems
• Enforced segregation of duties
• Scalable governance model supporting cloud and healthcare platforms (OCI/Cerner)

Qualifications

Required Qualifications:

• Bachelor's degree in Technology (Computer Science, InfoSec, or related field.
• 5 years of experience in Identity & Access Management (IAM), or Identity Governance such as:
• Identity Governance & Administration (IGA)
• RBAC / ABAC models
• PAM/PIM solutions
• Cloud platforms (OCI, Azure, AWS, or GCP)

Preferred Qualifications:

• Direct experience with Oracle Cloud Infrastructure (OCI) and Oracle Health (Cerner) access models
• Experience supporting or securing enterprise healthcare/clinical systems (e.g., Oracle Health / Cerner, Epic, or similar)
• Experience governing access to clinical workflows, sensitive patient data, and provider roles
• Familiarity with Microsoft Entra ID / Azure AD governance
• Experience with Zero Trust architectures and conditional access
• Relevant certifications (CISSP, CISM, CRISC, CCSP)
• Understanding :
• HIPAA Security Rule
• NIST frameworks (800-53, 800-207)

Special Notes: Resume/CV should be included with the online application.

Posting Overview: This position will remain posted until filled or for a maximum of 90 days. An initial review of all applicants will occur two weeks from the posting date. Candidates are advised on the application that for full consideration, applications must be received before the initial review date (which is within two weeks of the posting date).

If within the initial review no candidate was selected to fill the position posted, additional applications will be considered for the posted position; however, the posting will close once a finalist is identified, and at minimal, two weeks after the initial posting date. Please note, that if no candidate were identified and hired within 90 days from initial posting, the posting would close for review, and possibly reposted at a later date.

__

• Stony Brook Medicine is a smoke free environment. Smoking is strictly prohibited anywhere on campus, including parking lots and outdoor areas on the premises.
• All Hospital positions may be subject to changes in pass days and shifts as necessary.
• This position may require the wearing of respiratory protection, which may prohibit the wearing of facial hair.
• This function/position may be designated as "essential." This means that when the Hospital is faced with an institutional emergency, employees in such positions may be required to remain at their work location or to report to work to protect, recover, and continue operations at Stony Brook Medicine, Stony Brook University Hospital and related facilities.

Prior to start date, the selected candidate must meet the following requirements:

• Successfully complete pre-employment physical examination and obtain medical clearance from Stony Brook Medicine's Employee Health Services*
• Complete electronic reference check with a minimum of three (3) professional references.
• Successfully complete a 4 panel drug screen*
• Meet Regulatory Requirements for pre-employment screenings.
• Provide a copy of any required New York State license(s)/certificate(s).

Failure to comply with any of the above requirements could result in a delayed start date and/or revocation of the employment offer.

• The hiring department will be responsible for any fee incurred for examination.

_____

Stony Brook University is committed to excellence in diversity and the creation of an inclusive learning, and working environment. All qualified applicants will receive consideration for employment without regard to race, color, national origin, religion, sex, pregnancy, familial status, sexual orientation, gender identity or expression, age, disability, genetic information, veteran status and all other protected classes under federal or state laws.

If you need a disability-related accommodation, please call the University Office of Equity and Access at (631)632-6280.

In accordance with the Title II Crime Awareness and Security Act a copy of our crime statistics can be viewed here.

Stony Brook University Hospital, consistent with our shared core values and our intent to achieve excellence, remains dedicated to supporting healthier and more resilient communities, both locally and globally.

Anticipated Pay Range:

The starting salary range (or hiring range) for this position is - $87019 - $117116 / year.

The above salary range represents SBUH's good faith and reasonable estimate of the range of possible compensation at the time of posting. The specific salary offer will be based on the candidate's validated years of comparable experience. Any efforts to inflate or misrepresent experience are grounds for disqualification from the application process or termination of employment if hired.

Some positions offer annual supplemental pay such as:

• Location pay for UUP full-time positions ($4000)

Your total compensation goes beyond the number in your paycheck. SBUH provides generous leave, health plans, and state pension that add to your bottom line.

Visit our WHY WORK HERE page to learn about the total rewards we offer.

'736937