Apply on Employer Site

Ensemble Health Partners · 2 days ago

Engineer II, Cybersecurity

United States

Full-time

Remote

Mid Level

$76K/yr - $145K/yr

3+ years exp

Ensemble Health Partners is a leading provider of technology-enabled revenue cycle management solutions for health systems. The Engineer II, Cybersecurity Risk will manage the cybersecurity training and awareness program, champion a culture of security, and enhance the enterprise-wide Cybersecurity program.

Health CareHospitality

Responsibilities

Managing the Enterprise Phishing Awareness Campaign program, designing and leading cybersecurity table top exercises, and building a repeatable reporting strategy for distributing key program information

Develop and implement a long-term Cyber Security Awareness Program strategy with associated processes and procedures

Tailoring education programs as needed for crucial roles, including software developers and engineers

Monitor project activities to ensure timely completion and resolve critical issues

Lead the planning, coordination, and execution of an annual Cybersecurity Month

This includes ideating engaging activities, coordinating with various teams, and measuring the impact of the event to enhance cybersecurity awareness across the organization

Establish a metrics framework to measure the impact of the program

Qualification

Phishing Campaign experienceThreat Intelligence experienceCybersecurity awareness programGRC frameworkHITRUST frameworksKnowBe4 experienceInformation SecurityEducation program developmentRelationship building

Required

Professional Phishing Campaign experience: 2-3 years

Professional Threat Intelligence experience: 2-3 years

Professional experience creating threat intelligence education/knowledge-based articles

Experience with KnowBe4 or relatable program

Bachelor's or Master's degree in Computer Science or Cyber Security

3 - 5 years of experience in Information Security, preferably in the healthcare industry

Experience leading a cyber security awareness program

Hands-on experience with recognized Phishing Simulation tools and/or crisis simulation exercises

Previous professional experience implementing solutions/programs across risk, audit, compliance, and information security areas along with first-line functions

Hands on abilities with GRC: combining governance, risk management, and compliance practices into a cohesive framework

Knowledge of information security policies, standards, and governance controls in complex computing environments

Proven ability to create Enterprise-wide Risk Education and surrounding SOPs

Demonstrated experience in implementing training plans and tracking organizational progress across multiple lines of business

Administration and maturity of Phishing campaign and ongoing training

Experience with Navex IRM will be instrumental to reviewing policies

Proven success with KnowBe4 would bring value as the selected candidate will be creating training and workflows surrounding the Phishing Program

Ability to work across multiple time zones in a global environments

Proficiency with HITRUST frameworks

Foster positive relationships with other operating units and technical leadership