- Develop and continuously improve enterprise information security strategy, policies, standards, and control frameworks.
- Own and mature the HIPAA compliance and electronic protected health information program.
- Establish and lead the enterprise AI security and governance program.
- Develop risk-based processes for identifying, assessing, treating, and accepting security and technology risks.
- Lead security operations, including monitoring, threat intelligence, vulnerability management, detection and response, and investigations.
- Manage security incident response from inception through resolution, including crisis exercises and post-incident improvements.
- Embed security-by-design across product development, architecture, engineering, DevOps, and change management.
- Oversee cloud security architecture, application security practices, and software supply-chain security.
- Establish risk-based third-party security and privacy programs and address security requirements across information lifecycles.
- Build and lead the security organization, manage its budget and partners, and report security metrics and risks to leadership and the Board.
HIPAA