What are the responsibilities and job description for the Senior Cybersecurity Engineer-Onsite position at Orsini - Rare Disease Pharmacy Solutions?
About Orsini Rare Disease Pharmacy Solutions
Providing compassionate care since 1987, Orsini is a leader in rare disease and gene therapy pharmacy solutions, built to simplify how patients connect to advanced medicines. Through our comprehensive commercialization solutions including a nationwide specialty pharmacy, patient services hub, home infusion and nursing network, and third-party logistics provider, we work with biopharma, providers, and payors to ensure No Patient is Left Behind™.
Our Mission
Orsini is on a mission to be the essential partner for biopharma innovators, healthcare providers, and payers to support patients and their families in accessing revolutionary treatments for rare diseases. Through our integrated portfolio of services, we seek to pioneer comprehensive solutions that simplify how patients connect to advanced therapies while providing holistic, compassionate care so that No Patient is Left Behind™.
LIVE IT Values
At the heart of our company culture, the Orsini LIVE IT core values serve as guiding principles that shape how we interact with each other and those we serve. These values are the driving force behind our commitment to excellence, collaboration, and genuine care in every aspect of our work.
Leading Quality, Integrity, Valued Partner, Empathy, Innovation, Team-First
POSITION SUMMARY
REQUIRED KNOWLEDGE, SKILLS & TRAINING
Orsini is seeking a technically proficient and hands-on Senior Cybersecurity Engineer to lead and oversee the organization's cybersecurity initiatives. The successful candidate will be responsible for not only developing and implementing a comprehensive cybersecurity program but also for directly engaging in technical security operations to protect Orsini's information assets, ensuring compliance with relevant laws and regulations, and managing the organization's security infrastructure.
REQUIRED KNOWLEDGE, SKILLS & TRAINING
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. Master's degree preferred.
- Professional certifications such as CISSP, CISM, CISA, CEH, or equivalent.
- Minimum of 10 years of experience in cybersecurity, with at least 5 years in a technical leadership role.
- In-depth knowledge of cybersecurity frameworks, standards, and best practices.
- Strong understanding of healthcare industry regulations and requirements, and PHI.
- Extensive hands-on experience with security technologies and tools.
- Proven experience in managing security incidents and developing incident response plans.
- Excellent technical, leadership, communication, and interpersonal skills.
- Ability to think strategically, manage complex projects, and solve technical problems.
- Occasional travel may be required.
- On-call availability for emergency situations.
ESSENTIAL JOB DUTIES
Strategic and Technical Leadership:
- Develop, implement, and manage a strategic cybersecurity plan aligned with Orsini Healthcare's goals and objectives.
- Provide hands-on leadership and mentorship to the IT team, including direct involvement in technical tasks and problem-solving.
- Lead incident response efforts and serve as the escalation point for significant security events.
Policy, Compliance, and Risk Management:
- Develop, enforce, and continuously improve cybersecurity policies, standards, and procedures.
- Ensure compliance with HIPAA, HITECH, and other relevant regulations.
- Conduct comprehensive risk assessments to identify potential threats and vulnerabilities and develop mitigation strategies.
- Coordinate with internal and external auditors to facilitate cybersecurity audits and assessments.
Security Operations and Technology Management:
- Manage the day-to-day operations of the cybersecurity team, including monitoring, detection, and response to security events.
- Directly configure, manage, and optimize security technologies such as firewalls, intrusion detection/prevention systems, SIEMs, endpoint protection, and encryption solutions.
- Conduct regular security assessments, vulnerability scans, and penetration tests to identify and remediate security gaps.
Incident Response and Forensics:
- Lead and participate in the response to security incidents, including investigation, containment, eradication, recovery, and lessons learned.
- Perform digital forensics and analysis to support incident investigations.
Training, Awareness, and Collaboration:
- Develop and deliver hands-on cybersecurity training and awareness programs for employees at all levels.
- Foster a culture of cybersecurity awareness and compliance throughout the organization.
- Collaborate with IT, Legal, HR, and other departments to integrate cybersecurity measures into business processes and technology initiatives.
Continuous Improvement and Innovation:
- Stay current with the latest cybersecurity trends, threats, and technologies.
- Continuously evaluate and improve the effectiveness of the cybersecurity program.
- Lead efforts to innovate and enhance the organization's security posture through new technologies and methodologies.
EMPLOYEE BENEFITS
- BCBSIL Medical
- Delta Dental
- EyeMed Vision
- 401k
- Accident & Critical Illness
- Life Insurance
- PTO, Holiday Pay, and Floating Holidays
- Tuition Reimbursement
