Responsibilities:

• Perform regulatory compliance and security framework assessments as needed to identify and mitigate risk to Penn Medicine information assets.
• Communicate regularly and effectively with information technology stakeholders and data owners, and non-technical contacts to reduce information technology risks.
• Initiate, maintain, and enhance security awareness, training and education programs.
• Assist team members in advancing information assurance program.
• Collaborate with information security teammates to mitigate network and endpoint security risks.
• Work with third-party vendor, business associates, and other partners to assess information risk and make recommendations on remediation guidance.
• Performs duties in accordance with Penn Medicine and entity values, policies, and procedures.
• Other duties as assigned to support the unit, department, entity, and health system organization.

Education/Experience:

• Bachelor's Degree (Required), preferably in Information Security, Information Assurance or Technology. 
• 5 years of experience in Information technologies, risk management, and compliance (Required).
• 3 years of experience in healthcare or academia (Preferred).
• 3 years of familiarity with information security regulations and frameworks such as: HIPAA, PCI-DSS, HITRUST, NIST, ISO, etc. (Preferred).
• Information security-related certifications such as CISSP, HCISPP, CISM, CISA, etc. (Required). 

Skills & Abilities:

• Demonstrated interpersonal/verbal communication skills
• Demonstrated written communication skills
• Ability to troubleshoot, research and solve technically challenging problems
• Demonstrated time management and priority setting skills
• Ability to work in a fast paced environment with changing priorities
• Ability to work as part of a team