Principal Architect, Cybersecurity

Thank you for considering a career at Ensemble!

Ensemble is a leading provider of technology-enabled revenue cycle management solutions for health systems, including hospitals and affiliated physician groups. They offer end-to-end revenue cycle solutions as well as a comprehensive suite of point solutions to clients across the country.

Ensemble keeps communities healthy by keeping hospitals healthy. We recognize that healthcare requires a human touch, and we believe that every touch should be meaningful. This is why our people are the most important part of who we are. By empowering them to challenge the status quo, we know they will be the difference!

O.N.E Purpose:

• Customer Obsession: Consistently provide exceptional experiences for our clients, patients, and colleagues by understanding their needs and exceeding their expectations.

• Embracing New Ideas: Continuously innovate by embracing emerging technology and fostering a culture of creativity and experimentation.

• Striving for Excellence: Execute at a high level by demonstrating our “Best in KLAS” Ensemble Difference Principles and consistently delivering outstanding results.

The Opportunity:

As Principal Cybersecurity, you will develop and drive the cybersecurity strategy by defining security requirements, developing secure cloud architectures, and performing Information Assurance (IA) verification and audits. You will be responsible for designing and overseeing the implementation of security measures to protect digital assets, networks, and systems from malicious attacks. In the performance of those duties, you will assess risks and vulnerabilities, investigate security breaches, create policies to protect sensitive data and evaluate adherence to industry best-practices for tools, processes, services, and ownership.

Duties include:

1. Design and oversee the implementation of new security controls, processes and tools.

2. Lead the evaluation and use of security technologies and tools.

3. Develop, maintain and document configurations, policies and procedures.

4. Support the ongoing administration, design and user of network segmentation tools and underlying concepts for continuous risk reduction

5. Identify security issues and risks and develop mitigation plans.

6. Develop and socialize secure coding guidelines and best practices.

7. Create project deliverable documentation, including design, build and operations guide.

8. Identify gaps and propose solutions to increase security efficiency and effectiveness.

9. Support development of testing and evaluation plans, including cyber test activities.

10. Acts as a cybersecurity advisor for engineering teams, ensuring secure SDLC practices for enterprise applications.

11. Mentor teams on cybersecurity, fostering expertise in signaling security, secure protocol design, and network hardening.

12. Govern adoption of controls by the matrix organization. 13. Build a feedback loop, with metrics and internal/external stakeholder input, to enhance controls.

Essential Job Functions

• In partnership with IT and Compliance functions, create and lead a program-level playbooks and governance structures for cybersecurity operations, including risk mitigation and investment for controls.

• Develop and implement an assessment model of cybersecurity operations to identify control gaps and enhancements to tools and processes, applying industry best-practices.

• Develop and implement policies and standards to govern cybersecurity operations.

• Develop and implement methods to monitor the operating effectiveness of cybersecurity operations.

• Lead matrix adoption of corrective actions and enhancements to IT tools and processes.

• Promote a culture of continuous improvement through employee education and awareness and internal/external stakeholder engagement.

• This document is not an exhaustive list of all responsibilities, skills, duties, requirements, or working conditions associated with the job.

• Associates may be required to perform other job-related duties as required by their supervisor, subject to reasonable accommodation.

Employment Qualifications

• 10+ years of relevant Cybersecurity experience

• Bachelors Degree or equivalent experience (degree preferred in Computer Science)

• 5+ years of software engineering experience.

• 5+ years of experience in the healthcare industry.

• 5+ years of experience in cybersecurity roles.

• 5+ years of experience with HITRUST, SSAE 18, or other control frameworks.

• Demonstrated ability for stra