Develop and drive the cybersecurity strategy by defining security requirements, developing secure cloud architectures, and performing Information Assurance (IA) verification and audits.
Design and oversee the implementation of new security controls, processes and tools.
Lead the evaluation and use of security technologies and tools.
Develop, maintain and document configurations, policies and procedures.
Support the ongoing administration, design and user of network segmentation tools and underlying concepts for continuous risk reduction.
Identify security issues and risks and develop mitigation plans.
Develop and socialize secure coding guidelines and best practices.
Create project deliverable documentation, including design, build and operations guide.
Identify gaps and propose solutions to increase security efficiency and effectiveness.
Support development of testing and evaluation plans, including cyber test activities.
Act as a cybersecurity advisor for engineering teams, ensuring secure SDLC practices for enterprise applications.
Mentor teams on cybersecurity, fostering expertise in signaling security, secure protocol design, and network hardening.
Govern adoption of controls by the matrix organization.
Build a feedback loop, with metrics and internal/external stakeholder input, to enhance controls.
Requirements
10+ years of relevant Cybersecurity experience
Bachelors Degree or equivalent experience (degree preferred in Computer Science)
5+ years of software engineering experience.
5+ years of experience in the healthcare industry.
5+ years of experience in cybersecurity roles.
5+ years of experience with HITRUST, SSAE 18, or other control frameworks.
Demonstrated ability for strategy development, and solution planning, analysis, and delivery.
Demonstrated ability to lead programs from initiation to closure, with impact across multiple business units, functional areas, services, markets, customers/vendors, and/or locations.
Demonstrated ability to communicate effectively with internal and external stakeholders, including senior leadership and all levels of management.
Demonstrated ability to create and govern policies and standards.