Digital Risk & Resilience Director

Emory Healthcare•Tucker, GA

2d•$77 - $96•Remote

About The Position

The Digital Risk and Resilience Director is an individual contributor responsible for identifying, assessing, prioritizing, and improving visibility and accountability for digital and cybersecurity risks across Emory Healthcare. The role supports organizational resilience to cyber and technology disruption, including risks involving cybersecurity, technology disruption, emerging technologies, third-party dependencies, and readiness for technology-driven change. The Director serves as a trusted advisor to the Chief Digital Information Officer and senior leadership, working closely with the enterprise Chief Information Security Officer (CISO), enterprise security teams, Digital leadership, clinical and operational stakeholders, and other partners. The role evaluates digital risk, identifies gaps and dependencies, provides healthcare-focused risk perspectives, and helps ensure healthcare-specific risks and remediation needs are understood, prioritized, and addressed. Strong healthcare cybersecurity and technology-risk expertise, executive judgment, and the ability to influence outcomes in a matrixed environment are essential. Experience assessing identity management solutions in healthcare is a key skillset. The position primarily works remotely, with occasional onsite meetings required. Atlanta-based candidates are highly preferred; applicants residing in listed eligible states may also be considered and should expect occasional travel to Atlanta.

Requirements

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Engineering, or a related field; candidates with more than 13 years of directly related experience may be considered in lieu of a degree.
At least 10 years of progressive cybersecurity, technology risk, or related experience.
Prior senior cybersecurity or technology-risk leadership experience within a healthcare delivery organization or academic medical center.
Demonstrated breadth across major healthcare cybersecurity domains, including identity and access, infrastructure and network security, vulnerability management, risk assessment, security architecture, and incident response.
Experience evaluating cybersecurity and technology-risk capabilities, technologies, and strategic roadmaps and recommending risk-reduction investments.
Strong understanding of healthcare technology, clinical environments, regulatory requirements, operational continuity, resilience, and patient care.
Demonstrated ability to advise senior executives, translate complex risk into business terms, and influence outcomes across teams without direct authority.
Strong executive communication, judgment, relationship-management, and problem-solving skills.

Nice To Haves

Relevant certifications such as CISSP, CISM, or CRISC.
Experience assessing identity management solutions within the healthcare industry.
Atlanta-based location is highly preferred.

Responsibilities

Develop and maintain, in partnership with enterprise security, Digital, and other stakeholders, a comprehensive view of significant digital and cybersecurity risks affecting Emory Healthcare.
Advise leaders on areas requiring attention, investment, or escalation.
Assess healthcare cybersecurity and technology-risk capabilities, practices, and roadmaps in collaboration with enterprise security and other stakeholders.
Identify gaps, dependencies, and opportunities to reduce risk.
Identify emerging digital risks related to artificial intelligence, automation, technology dependencies, third parties, technical debt, and organizational readiness for technology-driven change.
Advise on investments in people, technology, architecture, and processes needed to manage digital risk.
Coordinate with disaster recovery teams to identify healthcare disaster recovery, resilience, and technology-continuity risks.
Engage appropriate IT operational owners and drive accountability for risk reduction; escalate barriers when remediation is not progressing through established channels.
Anticipate cyber and technology-disruption scenarios, identify cross-functional preparedness gaps and dependencies, and recommend actions to improve healthcare resilience before an incident occurs.
Track significant risk-remediation activities, including ownership, milestones, progress, and barriers, and drive visibility and accountability for risk-reduction efforts.
Lead or coordinate selected cross-functional risk-reduction initiatives when dedicated healthcare leadership is needed.
Maintain visibility across cybersecurity domains, including identity and access management, infrastructure and network security, vulnerability management, cloud and application security, clinical technologies and connected medical devices, data protection, and resilience.
Translate complex digital and cybersecurity risks into clear business, clinical, operational, regulatory, and patient-safety implications.
Provide executive-level reporting on significant risks, remediation progress, emerging concerns, and issues requiring leadership attention or escalation.
Serve as a trusted advisor on healthcare-related digital and cybersecurity risk and represent healthcare priorities in enterprise cybersecurity planning, governance, and prioritization.
Partner with enterprise security, Digital, clinical, operational, Compliance, Privacy, Internal Audit, Human Resources, Legal, and other stakeholders to drive coordinated risk reduction.
Work across enterprise and healthcare teams to ensure healthcare-specific risks, dependencies, and remediation needs are understood, prioritized, and addressed.
Influence risk-reduction outcomes across a highly matrixed environment, including situations without direct authority.