Overview

The Chief Information Security Officer (CISO) is responsible for establishing and maintaining a corporate-wide information security management program to ensure that information assets are adequately protected. This position is responsible for identifying, evaluating and reporting on information security risks in a manner that meets compliance and regulatory requirements, and aligns with and supports the risk posture of the enterprise. The CISO will report into the General Counsel of the company and work closely with the SVP of Delivery Operations and other leads from product development, and other business units to implement practices that meet defined policies and standards for information security.

The ideal candidate will have a strong background in and technical knowledge of information security, is a great communicator and had strong capability to understand complex business and technical processes. While the CISO is the leader of the security program, he or she must also have sufficient hands on knowledge and expertise in complex security technologies to be able to contribute as an individual contributor or senior leader.

About Center of Excellence :

Centers of Excellence (COE) are teams whose primary goal is to provide expertise in a specific field. COEs will usually provide support through training, research, and skilled leaders. In the case of HealthEdge, our Centers of Excellence incorporate the Human Resources, IT, Legal and Financial fields, all of which provide support to our Product divisions and allows the enterprise to move forward and achieve its goals.

What you will do :

• Develop, implement and monitor a strategic, comprehensive enterprise information security and IT risk management program to ensure that the integrity, confidentiality and availability of information is owned, controlled or processed by the organization.
• Develop, maintain and publish up-to-date information security policies, standards and guidelines.
• Oversee the approval, training, and dissemination of security policies and practices.
• Manage security incidents and events to protect corporate IT assets, including intellectual property, regulated data and the company's reputation.
• Provide direction, support and in-house consulting for development and implementation plans and procedures for business continuity and disaster recovery.
• Define and facilitate the information security risk assessment process, including the reporting and oversight of treatment efforts to address negative findings.
• Create, communicate and implement a risk-based process for vendor risk management, including the assessment and treatment for risks that may result from partners, consultants and other service providers.
• Provide strategic risk guidance for IT projects from a security standpoint, including the evaluation and recommendation of technical controls.
• Provide regular reporting on the current status of the information security program to enterprise risk teams, senior business and IT leaders, and the Audit Committee of the Board of Directors as part of a strategic enterprise risk management program.

What you bring :

Bonus points :

HealthEdge commits to building an environment and culture that supports the diverse representation of our teams. We aspire to have an inclusive workplace. We aspire to be a place where all employees have the opportunity to belong, make an impact and deliver excellent software and services to our customers.

Geographic Responsibility : While HealthEdge is located in Burlington, MA you may live anywhere in the US

Type of Employment : Full-time, permanent

FLSA Classification (USA Only) : Exempt

Budget / Revenue Responsibility :

Work Environment : The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job :

The above statements are intended to describe the general nature and level of the job being performed by the individual(s) assigned to this position. They are not intended to be an exhaustive list of all duties, responsibilities, and skills required. HealthEdge reserves the right to modify, add, or remove duties and to assign other duties as necessary. In addition, reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position in compliance with the Americans with Disabilities Act of 1990. Candidates may be required to go through a pre-employment criminal background check.

HealthEdge is an equal opportunity employer. We are committed to workforce diversity and actively encourage all qualified persons to seek employment with us, including, but not limited to, racial and ethnic minorities, women, veterans and persons with disabilities.

LI-Remote

Options

Sorry the Share function is not working properly at this moment. Please refresh the page and try again later. Share on your newsfeed

Software Powered by iCIMS