Engineer II Cybersecurity Risk

Thank you for considering a career at Ensemble Health Partners!

Ensemble Health Partners is a leading provider of technology-enabled revenue cycle management solutions for health systems, including hospitals and affiliated physician groups. They offer end-to-end revenue cycle solutions as well as a comprehensive suite of point solutions to clients across the country.

Ensemble keeps communities healthy by keeping hospitals healthy. We recognize that healthcare requires a human touch, and we believe that every touch should be meaningful. This is why our people are the most important part of who we are. By empowering them to challenge the status quo, we know they will be the difference!

O.N.E Purpose:

• Customer Obsession: Consistently provide exceptional experiences for our clients, patients, and colleagues by understanding their needs and exceeding their expectations.

• Embracing New Ideas: Continuously innovate by embracing emerging technology and fostering a culture of creativity and experimentation.

• Striving for Excellence: Execute at a high level by demonstrating our “Best in KLAS” Ensemble Difference Principles and consistently delivering outstanding results.

The Opportunity:

The Engineer, Cybersecurity is responsible for the overall training and awareness program, including the phishing campaign and education. You will champion a culture of security at Ensemble Health Partners, help to mature existing security awareness and training initiatives intended to influence employees, and own the multi-faceted enterprise-wide Cybersecurity training and awareness transformation by identifying gaps and architecting solutions to expand and enhance our Cybersecurity program. The selected candidate will have professional experience with an enterprise-wide program and creating education and SOPs surrounding this.

Job Functions/Abilities:

• Hands-on experience with recognized Phishing Simulation tools and/or crisis simulation exercises
• Previous professional experience implementing solutions/programs across risk, audit, compliance, and information security areas along with first-line functions.
• Hands on abilities with GRC: combining governance, risk management, and compliance practices into a cohesive framework.
• Knowledge of information security policies, standards, and governance controls in complex computing environments.
• Proven ability to create Enterprise-wide Risk Education and surrounding SOPs.
• Demonstrated experience in implementing training plans and tracking organizational progress across multiple lines of business.
• Administration and maturity of Phishing campaign and ongoing training.
• Experience with Navex IRM will be instrumental to reviewing policies.
• Proven success with KnowBe4 would bring value as the selected candidate will be creating training and workflows surrounding the Phishing Program.
• Ability to work across multiple time zones in a global environments.
• Proficiency with HITRUST frameworks.
• Foster positive relationships with other operating units and technical leadership

Additional Job Duties

• Managing the Enterprise Phishing Awareness Campaign program, designing and leading cybersecurity table top exercises, and building a repeatable reporting strategy for distributing key program information
• Develop and implement a long-term Cyber Security Awareness Program strategy with associated processes and procedures
• Tailoring education programs as needed for crucial roles, including software developers and engineers
• Monitor project activities to ensure timely completion and resolve critical issues
• Lead the planning, coordination, and execution of an annual Cybersecurity Month
• This includes ideating engaging activities, coordinating with various teams, and measuring the impact of the event to enhance cybersecurity awareness across the organization
• Establish a metrics framework to measure the impact of the program

Qualifications, Skills, and Experience

• Professional Phishing Campaign experience: 2-3 years
• Professional Threat Intelligence experience: 2-3 years
• Professional experience creating threat intelligence education/knowledge-based articles.
• Experience with KnowBe4 or relat