Digital Risk & Resilience Director

At Emory Healthcare we fuel your professional journey with better benefits, valuable resources, ongoing mentorship and leadership programs for all types of jobs, and a supportive environment that enables you to reach new heights in your career and be what you want to be.  We provide: 

• Comprehensive health benefits that start day 1 
• Student Loan Repayment Assistance & Reimbursement Programs 
• Family-focused benefits  
• Wellness incentives 
• Ongoing mentorship, development, and leadership programs  
• And more  

Highly prefer Atlanta based candidates for easier access to attend stakeholder meetings, etc, but we will consider applicants residing in the following states which are eligible for hire: Alabama, Arkansas, Florida, Georgia, Illinois, Louisiana, Michigan, New Hampshire, North Carolina, Ohio, Pennsylvania, South Carolina, Tennessee, Texas, Virginia, and Wisconsin

Please note, out of state candidates will be needed for occasional travel to Atlanta.

The Digital Risk and Resilience Director will perform as an individual contributor, and be responsible for proactively identifying, assessing, prioritizing, and driving visibility and accountability for digital and cybersecurity risks across Emory Healthcare, while helping strengthen organizational resilience to cyber and technology disruption. This includes risks related to cybersecurity, technology disruption, emerging technologies, third-party dependencies, and organizational readiness for technology-driven change. You will perform as a trusted advisor to the Chief Digital Information Officer and senior leadership and works in close alignment with the enterprise Chief Information Security Officer (CISO) and enterprise security teams, Digital leadership, clinical and operational stakeholders, and other key partners to evaluate digital risk, identify gaps and dependencies, provide healthcare-focused risk perspectives, and ensure healthcare-specific risks and remediation needs are appropriately understood, prioritized and addressed. Success requires strong healthcare cybersecurity and technology risk expertise, executive judgment, and the ability to influence and drive outcomes in a highly matrixed environment.  Experience in identity management solutions assessment within the healthcare industry will be a key skillset for this opening.

Please note, while this role will primarily work in a remote nature, there will be occasional onsite meetings required.

Digital and Cybersecurity Risk Strategy:

• →Proactively identifies and maintains, in partnership with enterprise security, Digital, and other key stakeholders, a comprehensive view of significant digital and cybersecurity risks affecting Emory Healthcare.
• →Advises leaders on areas requiring attention, investment, or escalation.
• →Assesses healthcare cybersecurity and technology-risk capabilities, practices, and roadmaps in collaboration with enterprise security and other key stakeholders.
• →Identifies gaps, dependencies, and opportunities to reduce risk.
• →Identifies emerging digital risks related to artificial intelligence, automation, technology dependencies, third parties, technical debt, and organizational readiness for technology-driven change.
• →Advises on investments in people, technology, architecture, and processes needed to manage digital risk.

Resilience, Disaster Recovery, and Technology Continuity:

• →Coordinates with disaster recovery teams to identify healthcare disaster recovery, resiliency, and technology-continuity risks.
• →Engages the appropriate IT operational owners and drives accountability for risk reduction.
• →Escalates barriers when remediation is not progressing through established channels.
• →Anticipates potential cyber and technology-disruption scenarios.
• →Identifies cross-functional preparedness gaps and dependencies.
• →Recommends actions to improve healthcare resilience before an incident occurs.

Risk Remediation and Accountability:

• →Tracks significant risk-remediation activities, including ownership, milestones, progress, and barriers.
• →Drives visibility and accountability for risk-reduction efforts
• →Leads or coordinates selected cross-functional risk-reduction initiatives when dedicated healthcare leadership is needed.

Cybersecurity Domain Oversight:

• →Maintains visibility across key cybersecurity domains, including: Identity and access management solutions; Infrastructure and network security; Vulnerability management; Cloud and application security; Clinical technologies and connected medical devices; Data protection; Resilience

Executive Advising, Reporting, and Risk Communication:

• →Translates complex digital and cybersecurity risks into clear business, clinical, operational, regulatory, and patient-safety implications.
• →Provides executive-level reporting on significant risks, remediation progress, emerging concerns, and issues requiring leadership attention or escalation.
• →Serves as a trusted advisor on healthcare-related digital and cybersecurity risk.
• →Represents healthcare priorities in enterprise cybersecurity planning, governance, and prioritization.

Enterprise and Cross-Functional Partnership:

• →Partners with enterprise security, Digital, clinical, operational, Compliance, Privacy, Internal Audit, Human Resources, Legal, and other stakeholders to drive coordinated risk reduction.
• →Works across enterprise and healthcare teams to ensure healthcare-specific risks, dependencies, and remediation needs are appropriately understood, prioritized, and addressed.
• →Influences risk-reduction outcomes across a highly matrixed environment, including situations in which the role does not have direct authority. 

• Education - Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Engineering, or a related field. Candidates with more than 13 years of directly related experience may be considered in lieu of a degree.
• Experience -
  • At least 10 years of progressive cybersecurity, technology risk, or related experience.
  • Prior senior cybersecurity or technology risk leadership experience within a healthcare delivery organization or academic medical center required.
  • Demonstrated breadth across major healthcare cybersecurity domains, including identity and access, infrastructure and network security, vulnerability management, risk assessment, security architecture, and incident response.
  • Experience evaluating cybersecurity and technology-risk capabilities, technologies, and strategic roadmaps and recommending risk-reduction investments.
  • Knowledge, skills, and abilities (required) - Strong understanding of healthcare technology, clinical environments, regulatory requirements, operational continuity, resilience, and patient care. Demonstrated ability to advise senior executives, translate complex risk into business terms, and influence outcomes across teams without direct authority. Strong executive communication, judgment, relationship-management, and problem-solving skills.
  • Preferred Qualifications Certification - Relevant certifications such as CISSP, CISM, or CRISC preferred

Emory is an equal opportunity employer, and qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status or other characteristics protected by state or federal law.

Emory Healthcare is committed to providing reasonable accommodations to qualified individuals with disabilities upon request. Please contact Emory Healthcare’s Human Resources at careers@emoryhealthcare.org. Please note that one week's advance notice is preferred.