Vice President, CISO at DaVita in New York, NY

Posting Date 10/29/2026 910 Erie Blvd ESte 150, Syracuse, New York, 13210-1048, United States of America

Vice President, Chief Information Security Officer (CISO)

About DaVita

DaVita is a Fortune 500 healthcare community dedicated to transforming care and improving the lives of patients across the globe. As one of the nation's largest providers of kidney care services, our mission is to be the provider, partner, and employer of choice. We operate with a "Community First, Company Second" mindset, guided by our core values: Service Excellence, Integrity, Team, Continuous Improvement, Passion, Accountability, and Fulfillment.

Position Overview

DaVita is seeking a dynamic, strategic executive leader to serve as our Vice President, Chief Information Security Officer (CISO).

Reporting directly to the Chief Information Officer (CIO), the CISO is the principal executive responsible for DaVita’s global cybersecurity vision, information security operations, technical risk governance, and regulatory compliance. In this role, you will lead an enterprise-scale security organization dedicated to protecting sensitive patient data, clinical systems, proprietary intellectual property, and critical infrastructure across more than 2,800 dialysis centers and corporate environments nationwide.

The ideal leader brings deep technical acumen, modern architectural perspective (Zero Trust, Cloud Modernization, AI Governance), and executive presence to champion security as a business enabler and patient-safety imperative.

Key Responsibilities

Security Strategy, Vision & Architecture

• Formulate, articulate, and execute a multi-year enterprise cybersecurity and risk management strategy aligned with DaVita’s strategic business priorities and digital transformation initiatives.
• Drive architectural modernization across enterprise security systems, implementing Zero Trust principles, advanced Identity and Access Management (IAM), and resilient cloud security frameworks (AWS, Azure, and multi-tenant SaaS).
• Establish governance, risk assessments, and guardrails for emerging technologies, including Generative AI, machine learning pipelines, and connected biomedical/IoT devices.

Security Operations, Threat Intelligence & Incident Response

• Direct 24/7 Security Operations (SecOps), Security Information and Event Management (SIEM), vulnerability management, and threat intelligence functions.
• Lead enterprise incident response, cyber crisis management, and disaster recovery planning, ensuring operational readiness and rapid containment in high-stakes scenarios.
• Maintain strategic relationships with external threat intelligence agencies, law enforcement, and healthcare Information Sharing and Analysis Centers (H-ISAC).

Governance, Risk, Compliance (GRC) & IT Audit

• Ensure comprehensive regulatory compliance and audit readiness across healthcare and financial standards, including HIPAA/HITECH, SOX, PCI DSS, NIST Cybersecurity Framework, and ISO 27001.
• Direct the IT Audit and Technology Risk functions, assessing third-party vendor risk, managing internal controls, and overseeing continuous compliance monitoring.
• Champion a culture of security awareness across the enterprise through role-based education, continuous phishing simulations, and training for over 70,000 teammates.

Executive Leadership, Culture & Stakeholder Engagement

• Serve as the trusted advisor to the CIO, Chief Legal Officer, C-Suite executives, and the Board of Directors on cybersecurity risk posture, threat trends, and capital allocation.
• Lead, mentor, and inspire a world-class cybersecurity organization spanning Security Operations, Engineering, Architecture, IT Audit, and Security Program Management.
• Foster a collaborative, inclusive environment rooted in DaVita's core values, supporting teammate growth and operational excellence.

Qualifications & Experience

Required:

• Education: Bachelor’s degree in Computer Science, Information Security, Engineering, Information Systems, or a related technical discipline (or equivalent practical experience).
• Experience:
  • 15+ years of progressive experience in information technology and cybersecurity, with at least 7+ years in executive-level leadership (VP, CISO, or equivalent).
  • Demonstrated track record leading enterprise cybersecurity in large, complex, distributed, or highly regulated organizations (Healthcare, Life Sciences, or Financial Services preferred).
  • Deep expertise across security operations, threat detection, incident management, cloud infrastructure security, and regulatory frameworks (HIPAA, SOX, NIST).
  • Proven experience presenting cyber risk, security roadmaps, and investment justifications to C-suite leaders and Board committees.
  • Exceptional people leadership skills with demonstrated success recruiting, developing, and retaining high-performing technical talent.

Preferred:

• Master’s degree (MS in Cybersecurity/Information Technology or MBA).
• Industry-recognized certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Chief Information Security Officer (CCISO).
• Experience with digital health platforms, electronic health records (EHR), clinical technology workflows, or biomedical device security.

What We’ll Provide:

More than just pay, our DaVita Rewards package connects teammates to what matters most. Teammates are eligible to begin receiving benefits on the first day of the month following or coinciding with one month of continuous employment. Below are some of our benefit offerings.

• Comprehensive benefits: Medical, dental, vision, 401(k) match, paid time off, PTO cash out

• Support for you and your family: Family resources, EAP counseling sessions, access Headspace®, backup child and elder care, maternity/paternity leave and more

• Professional development programs: DaVita offers a variety of programs to help strong performers grow within their career and also offers on-demand virtual leadership and development courses through DaVita’s online training platform StarLearning.

#LI-MP4

At DaVita, we strive to be a community first and a company second. We want all teammates to experience DaVita as "a place where I belong." Our goal is to embed belonging into everything we do in our Village, so that it becomes part of who we are. We are proud to be an equal opportunity workplace and comply with state and federal affirmative action requirements. Individuals are recruited, hired, assigned and promoted without regard to race, national origin, religion, age, color, sex, sexual orientation, gender identity, disability, protected veteran status, or any other protected characteristic.

This position will be open for a minimum of three days.

The Salary Range for the role is $200,000.00 - $240,000.00 per year.

If a candidate is hired, they will be paid at least the minimum wage according to their geographical jurisdiction and the exemption status for the position.

New York Exempt: New York City and Long Island: $66,300.00/year, Nassau, Suffolk, and Westchester counties: $66,300.00/year, Remainder of New York state: $62,353.20/year New York Non-exempt: New York City and Long Island: $17.00/hour, Nassau, Suffolk, and Westchester counties: $17.00/hour, Remainder of New York state: $16.00/hour Washington Exempt: $80,168.40/year Washington Non-exempt: Bellingham: $19.13/hour, Burien: $21.78/hour, Everette: $20.77/hour, Unincorporated King County: $20.82/hour, Renton: $21.57/hour, Seattle: $21.30/hour, Tukwila: $21.65/hour, Remainder of Washington state: $17.13/hour For location-specific minimum wage details, see the following link: https://davita.jobs/WageRates

Compensation for the role will depend on a number of factors, including a candidate’s qualifications, skills, competencies and experience. DaVita offers a competitive total rewards package, which includes a 401k match, healthcare coverage and a broad range of other benefits. Learn more at https://careers.davita.com/benefits

Colorado Residents: Please do not respond to any questions in this initial application that may seek age-identifying information such as age, date of birth, or dates of school attendance or graduation. You may also redact this information from any materials you submit during the application process. You will not be penalized for redacting or removing this information.