Principal Architect, Cybersecurity

Ensemble Health Partners

23h • Remote

About The Position

As Principal Cybersecurity, you will develop and drive the cybersecurity strategy by defining security requirements, developing secure cloud architectures, and performing Information Assurance (IA) verification and audits. You will be responsible for designing and overseeing the implementation of security measures to protect digital assets, networks, and systems from malicious attacks. In the performance of those duties, you will assess risks and vulnerabilities, investigate security breaches, create policies to protect sensitive data and evaluate adherence to industry best-practices for tools, processes, services, and ownership. In partnership with IT and Compliance functions, create and lead a program-level playbooks and governance structures for cybersecurity operations, including risk mitigation and investment for controls. Develop and implement an assessment model of cybersecurity operations to identify control gaps and enhancements to tools and processes, applying industry best-practices. Develop and implement policies and standards to govern cybersecurity operations. Develop and implement methods to monitor the operating effectiveness of cybersecurity operations. Lead matrix adoption of corrective actions and enhancements to IT tools and processes. Promote a culture of continuous improvement through employee education and awareness and internal/external stakeholder engagement.

Requirements

• 10+ years of relevant Cybersecurity experience
• Bachelors Degree or equivalent experience (degree preferred in Computer Science)
• 5+ years of software engineering experience.
• 5+ years of experience in the healthcare industry.
• 5+ years of experience in cybersecurity roles.
• 5+ years of experience with HITRUST, SSAE 18, or other control frameworks.
• Demonstrated ability for strategy development, and solution planning, analysis, and delivery.
• Demonstrated ability to lead programs from initiation to closure, with impact across multiple business units, functional areas, services, markets, customers/vendors, and/or locations.
• Demonstrated ability to communicate effectively with internal and external stakeholders, including senior leadership and all levels of management.
• Demonstrated ability to create and govern policies and standards.

Responsibilities

• Design and oversee the implementation of new security controls, processes and tools.
• Lead the evaluation and use of security technologies and tools.
• Develop, maintain and document configurations, policies and procedures.
• Support the ongoing administration, design and user of network segmentation tools and underlying concepts for continuous risk reduction
• Identify security issues and risks and develop mitigation plans.
• Develop and socialize secure coding guidelines and best practices.
• Create project deliverable documentation, including design, build and operations guide.
• Identify gaps and propose solutions to increase security efficiency and effectiveness.
• Support development of testing and evaluation plans, including cyber test activities.
• Acts as a cybersecurity advisor for engineering teams, ensuring secure SDLC practices for enterprise applications.
• Mentor teams on cybersecurity, fostering expertise in signaling security, secure protocol design, and network hardening.
• Govern adoption of controls by the matrix organization.
• Build a feedback loop, with metrics and internal/external stakeholder input, to enhance controls.

Benefits

• Associate Benefits – We offer a comprehensive benefits package designed to support the physical, emotional, and financial health of you and your family, including healthcare, time off, retirement, and well-being programs.
• Growth – We invest in your professional development. Each associate will earn a professional certification relevant to their field and can obtain tuition reimbursement.
• Recognition – We offer quarterly and annual incentive programs for all employees who go beyond and keep raising the bar for themselves and the company.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level