Cyber Security Program Manager

<div class="content-intro"><p><strong>About Ceribell</strong></p> <p>Ceribell is a medical technology company focused on transforming the diagnosis and management of patients with serious neurological conditions. The Ceribell System is a novel, point-of-care electroencephalography (“EEG”) platform specifically designed to address the unmet needs of patients in the acute care setting, and is being used in hundreds of community hospitals, large academic facilities and major IDN's across the country. Our entire team is driven by a shared commitment to transforming the landscape of critical care through our rapid seizure detection technology, come join the movement!</p></div><p><strong>Position Overview</strong>:</p> <h3><strong>Cybersecurity Program Management</strong></h3> <ul> <li>Lead coordination efforts with Information Security and Governance Risk &amp; Compliance (GRC) leadership to strategically plan, execute, and oversee cybersecurity initiatives, ensuring alignment with company-wide objectives and regulatory compliance.</li> <li>Direct and refine ongoing continuous monitoring requirements to ensure effectiveness and audit readiness.</li> <li>Help lead and participate in FedRAMP audits, driving documentation strategy, POA&amp;M tracking, and interdepartmental reporting between vendors, internal teams, and Security leadership.</li> <li>Guide the team in identifying and prioritizing improvements for NIST 800-53 control effectiveness and maturity.</li> <li>Coordination of risk assessments, vulnerability management activities, and security training schedules in collaboration with key stakeholders</li> </ul> <h3><strong>IT Program Management</strong></h3> <ul> <li>Partner and collaborate across the organization to align on strategic objectives and shape roadmaps IT and Security navigating complex, high-impact projects, with agility to re-prioritize as needed.</li> <li>Drive initiatives to streamline operational efficiency, and maximize software utilization across the enterprise.</li> </ul> <h3><strong>Governance, Risk, and Compliance (GRC)</strong></h3> <ul> <li>Collaboration with the GRC team to ensure policies, procedures, and standards are proactively updated to maintain alignment with evolving compliance frameworks.</li> <li>Facilitate security risk assessments, ensuring thorough documentation of critical risks and establishing measurable strategies to drive risk mitigation and accountability</li> </ul> <h3><strong>Incident Response</strong></h3> <ul> <li>Provide strategic input<strong> </strong>in incident response planning and execution, contributing to the design of response processes an