Digital Risk & Resilience Director

Emory•Atlanta, GA

1d•Remote

About The Position

The Digital Risk and Resilience Director is an individual-contributor role responsible for identifying, assessing, prioritizing, and increasing visibility and accountability for digital and cybersecurity risks across Emory Healthcare. The role helps strengthen organizational resilience to cyber and technology disruption, including risks related to cybersecurity, technology disruption, emerging technologies, third-party dependencies, and organizational readiness for technology-driven change. The Director serves as a trusted advisor to the Chief Digital Information Officer and senior leadership, working closely with the enterprise Chief Information Security Officer (CISO), enterprise security teams, Digital leadership, clinical and operational stakeholders, and other partners. The role evaluates digital risk, identifies gaps and dependencies, provides healthcare-focused risk perspectives, and ensures healthcare-specific risks and remediation needs are understood, prioritized, and addressed. Success requires healthcare cybersecurity and technology risk expertise, executive judgment, and the ability to influence outcomes in a highly matrixed environment. Experience assessing identity management solutions in the healthcare industry is a key skillset. The role primarily works remotely, with occasional onsite meetings and travel to Atlanta. Atlanta-based candidates are highly preferred; candidates residing in the listed eligible states may also be considered.

Requirements

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Engineering, or a related field; candidates with more than 13 years of directly related experience may be considered in lieu of a degree.
At least 10 years of progressive cybersecurity, technology risk, or related experience.
Prior senior cybersecurity or technology risk leadership experience within a healthcare delivery organization or academic medical center.
Demonstrated breadth across major healthcare cybersecurity domains, including identity and access, infrastructure and network security, vulnerability management, risk assessment, security architecture, and incident response.
Experience evaluating cybersecurity and technology-risk capabilities, technologies, and strategic roadmaps and recommending risk-reduction investments.
Strong understanding of healthcare technology, clinical environments, regulatory requirements, operational continuity, resilience, and patient care.
Demonstrated ability to advise senior executives, translate complex risk into business terms, and influence outcomes across teams without direct authority.
Strong executive communication, judgment, relationship-management, and problem-solving skills.
Experience assessing identity management solutions within the healthcare industry.

Nice To Haves

Relevant certifications such as CISSP, CISM, or CRISC.
Residence in or near Atlanta for easier access to stakeholder meetings.

Responsibilities

Maintain, in partnership with enterprise security, Digital, and other stakeholders, a comprehensive view of significant digital and cybersecurity risks affecting Emory Healthcare.
Advise leaders on areas requiring attention, investment, or escalation.
Assess healthcare cybersecurity and technology-risk capabilities, practices, and roadmaps; identify gaps, dependencies, and opportunities to reduce risk.
Identify emerging digital risks related to artificial intelligence, automation, technology dependencies, third parties, technical debt, and organizational readiness for technology-driven change.
Advise on investments in people, technology, architecture, and processes needed to manage digital risk.
Coordinate with disaster recovery teams to identify healthcare disaster recovery, resiliency, and technology-continuity risks.
Engage appropriate IT operational owners, drive accountability for risk reduction, and escalate barriers when remediation is not progressing through established channels.
Anticipate cyber and technology-disruption scenarios, identify cross-functional preparedness gaps and dependencies, and recommend actions to improve healthcare resilience.
Track significant risk-remediation activities, including ownership, milestones, progress, and barriers, and drive visibility and accountability for risk-reduction efforts.
Lead or coordinate selected cross-functional risk-reduction initiatives when dedicated healthcare leadership is needed.
Maintain visibility across cybersecurity domains including identity and access management, infrastructure and network security, vulnerability management, cloud and application security, clinical technologies and connected medical devices, data protection, and resilience.
Translate complex digital and cybersecurity risks into business, clinical, operational, regulatory, and patient-safety implications.
Provide executive-level reporting on significant risks, remediation progress, emerging concerns, and issues requiring leadership attention or escalation.
Serve as a trusted advisor on healthcare-related digital and cybersecurity risk and represent healthcare priorities in enterprise cybersecurity planning, governance, and prioritization.
Partner with enterprise security, Digital, clinical and operational teams, Compliance, Privacy, Internal Audit, Human Resources, Legal, and other stakeholders to coordinate risk reduction.
Influence risk-reduction outcomes across enterprise and healthcare teams, including situations where the role has no direct authority.