Virtual CISO (vCISO), Hospitals and Health Systems

Clearwater Security & Compliance • Nashville, TN

299d

About The Position

Clearwater Security and Compliance LLC is the leading provider of cybersecurity, risk management, and HIPAA compliance software, consulting, and managed services for the healthcare industry. Our solutions enable organizations to avoid preventable breaches, protect patients and their data, meet regulatory requirements, and optimize cybersecurity investments. More than 400 healthcare organizations, including 70 of the nation's largest health systems and a large universe of physician groups and digital health companies, trust Clearwater to meet their cybersecurity and compliance needs. The Virtual CISO, Cybersecurity Principal Consultant ('vCISO') will lead and execute Clearwater consulting engagements and managed services programs and plays a key role in contributing to the Company's rapid growth. The vCISO engages in thought leadership, new solution development and continuously builds his/her expertise in relevant domains to Clearwater's solutions. The vCISO develops his/her mastery of healthcare cybersecurity, cyber risk management, and compliance while exploring emerging healthcare industry issues, technologies, and opportunities. The vCISO spends the majority of her/his time working directly with customers. In this role he/she will act as a vCISO leading multiyear cybersecurity and HIPAA compliance programs for hospitals and health systems. This role will set a cybersecurity strategy in place and successfully execute that strategy working closely with customers' senior leaders, the delivery team and leveraging other subject matter experts at Clearwater. The vCISO is a key advisor and expert to Clearwater customers and represents the high standards of quality and excellence for which Clearwater is known. Through the delivery of robust and proactive cybersecurity, risk analysis, and risk response solutions, the vCISO enables customers to improve patient safety, safeguard sensitive health information, and protect their corporate capital and reputation. The vCISO -Principal Consultant will dedicate 75% of their time to client billable work, which equates to 1,560 hours over the course of a calendar year.

Requirements

• 10+ years of related work experience.
• Bachelor's degree.
• Served in a leadership role in a cybersecurity program for healthcare services provider, hospital preferred.
• Additional healthcare industry experience.
• Desire and ability to create thought leadership like webinars, blog articles, and white papers.
• Experience and comfort with public speaking.
• Disciplined approach to continuously developing personal skills.
• Drive to constantly improve what and how we deliver value to our customers.
• Relevant experience performing NIST-based Information Systems risk analyses and HIPAA Privacy, Security, and Breach Notification Rule compliance evaluations.
• Self-starters who can work independently, seek out and leverage internal resources when needed.
• Relevant experience and prior demonstrable success leading and delivering consulting engagements in the IS or healthcare space.
• Relevant technical training, project management training, and certifications such as CISSP or HCISPP.
• Excellent analytic and problem-solving skills, especially in the information systems, security, and privacy space.
• Highly effective verbal communications and presentation skills in a customer setting.
• Excellent technical written communication skills, in particular, regarding information system, security and privacy subject matter, policies and procedures.
• Experience with creating and executing repeatable work processes and procedures.
• Experience with providing technical/product support services within a sales process.
• Prior experience and proven success planning, developing materials, and delivering training on technical subject matter and software products.
• The initiative and ability to master HIPAA regulations, enforcement, and OCR audit subject matter, as well as the NIST Information Risk Management framework and processes.
• Ability to learn new subject matter and context quickly and to maintain market and subject matter awareness.
• Ability to understand SOWs, customer proposals, project notes, deliverables, and final reports.

Responsibilities

• Complete or oversee completion of consulting services engagements as assigned, following Statements of Work, Clearwater standards, relevant customer policies, Clearwater defined work processes, templates, and IRM|Pro software.
• Achieve utilization targets of at least 75% (1,560 hours per year), complete projects on time and budget, and meet quality standards.
• Provide vCISO services for customers, following Clearwater methodologies and industry best practices.
• Coach consultants and provide training as needed, especially for those working on engagements they are leading.
• Study, learn, test, document, execute and seek to continuously improve scalable consulting services processes.
• Contribute to training programs and materials to support and encourage customer adoption and retention of Clearwater's IRM|Pro software.
• Execute project planning, scheduling, and other coordination of internal and customer resources.
• Prepare and deliver thoughtful, insightful, and professional presentations to customers and internal Clearwater stakeholders.
• Create, review and edit findings, observations, and recommendations reports.
• Develop and continuously improve tools and templates used in delivering customer engagements and training subcontracted resources.
• Conduct IRM|Pro training and orientation sessions with customers.
• Actively participate in the development of strategies and execution of tactics supporting business development activities.
• Provide pre-sales support to Sales in assessing customer needs, scoping engagements, and estimating the level of effort for consulting projects or managed services engagements.
• Assist Product Innovation, Customer Success, Sales, Marketing, and other departments with projects as requested.
• Develop and deliver thought leadership, including creating and providing webinars, writing blog posts, and participating in industry events.
• Contribute to the development and delivery of new services to support business growth.
• Identify, document, and pursue opportunities for follow-on engagements or additional services with customers.
• Become knowledgeable of Clearwater's solution and service offerings, sales process, marketing materials, contract and SOW structure, methodologies, delivery standards, work tools, and processes.
• Pursue additional education and stay current on best practices, technical skills, and tools related to the position's duties.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Industry: Professional, Scientific, and Technical Services
• Education Level: Bachelor's degree