Digital Risk & Resilience Director

Be inspired. Be rewarded. Belong. At Emory Healthcare.

At Emory Healthcare we fuel your professional journey with better benefits, valuable resources, ongoing mentorship and leadership programs for all types of jobs, and a supportive environment that enables you to reach new heights in your career and be what you want to be. We provide:

• Comprehensive health benefits that start day 1
• Student Loan Repayment Assistance & Reimbursement Programs
• Family-focused benefits
• Wellness incentives
• Ongoing mentorship,development,and leadership programs
• And more

Highly prefer Atlanta based candidates for easier access to attend stakeholder meetings, etc, but we will consider applicants residing in the following states which are eligible for hire:
Alabama, Arkansas, Florida, Georgia, Illinois, Louisiana, Michigan, New Hampshire, North Carolina, Ohio, Pennsylvania, South Carolina, Tennessee, Texas, Virginia, and Wisconsin

Please note, out of state candidates will be needed for occasional travel to Atlanta.

The Digital Risk and Resilience Director will perform as an individual contributor, and be responsible for proactively identifying, assessing, prioritizing, and driving visibility and accountability for digital and cybersecurity risks across Emory Healthcare, while helping strengthen organizational resilience to cyber and technology disruption. This includes risks related to cybersecurity, technology disruption, emerging technologies, third-party dependencies, and organizational readiness for technology-driven change.

You will perform as a trusted advisor to the Chief Digital Information Officer and senior leadership and works in close alignment with the enterprise Chief Information Security Officer (CISO) and enterprise security teams, Digital leadership, clinical and operational stakeholders, and other key partners to evaluate digital risk, identify gaps and dependencies, provide healthcare-focused risk perspectives, and ensure healthcare-specific risks and remediation needs are appropriately understood, prioritized and addressed.

Success requires strong healthcare cybersecurity and technology risk expertise, executive judgment, and the ability to influence and drive outcomes in a highly matrixed environment. Experience in identity management solutions assessment within the healthcare industry will be a key skillset for this opening.

Please note, while this role will primarily work in a remote nature, there will be occasional onsite meetings required.

RESPONSIBILITIES:

Digital and Cybersecurity Risk Strategy:

• Proactively identifies and maintains, in partnership with enterprise security, Digital, and other key stakeholders, a comprehensive view of significant digital and cybersecurity risks affecting Emory Healthcare.
• Advises leaders on areas requiring attention, investment, or escalation.
• Assesses healthcare cybersecurity and technology-risk capabilities, practices, and roadmaps in collaboration with enterprise security and other key stakeholders.
• Identifies gaps, dependencies, and opportunities to reduce risk.
• Identifies emerging digital risks related to artificial intelligence, automation, technology dependencies, third parties, technical debt, and organizational readiness for technology-driven change.
• Advises on investments in people, technology, architecture, and processes needed to manage digital risk.

Resilience, Disaster Recovery, and Technology Continuity:

• Coordinates with disaster recovery teams to identify healthcare disaster recovery, resiliency, and technology-continuity risks.
• Engages the appropriate IT operational owners and drives accountability for risk reduction.
• Escalates barriers when remediation is not progressing through established channels.
• Anticipates potential cyber and technology-disruption scenarios.
• Identifies cross-functional preparedness gaps and dependencies.
• Recommends actions to improve healthcare resilience before an incident occurs.

Risk Remediation and Accountability:

• Tracks significant risk-remediation activities, including ownership, milestones, progress, and barriers.
• Drives visibility and accountability for risk-reduction efforts
• Leads or coordinates selected cross-functional risk-reduction initiatives when dedicated healthcare leadership is needed.

Cybersecurity Domain Oversight:

• Maintains visibility across key cybersecurity domains, including:
  Identity and access management solutions;
  Infrastructure and network security;
  Vulnerability management;
  Cloud and application security;
  Clinical technologies…