Chief Information Security Officer in Concord, Massachusetts at Emerson Hospital

Job Summary:

The Chief Information Security Officer (CISO) is a senior member of the Information Systems (IS) leadership team and is responsible for developing, leading, and executing Emerson Health’s enterprise-wide information security program. Reporting to the Chief Information and Digital Officer, the CISO provides strategic direction and operational oversight to protect the confidentiality, integrity, and availability of the organization’s data, systems, and technology infrastructure.

As a key leader in a, high-performing IS team, the CISO combines executive-level strategy with direct, hands-on responsibilities for security architecture, governance, operations, and incident response. The CISO collaborates across departments, presents to Senior Leadership, including the Board of Directors, and ensures that security is integrated into the organization’s digital roadmap and daily operations.

Minimum Qualifications:

• Education:
  Bachelor’s degree in Information Technology, Cybersecurity, or a business or healthcare related discipline required.

• Experience:

Minimum 10 years of progressively responsible IT and information security experience.

At least 3 years in a senior security leadership role with direct reporting to executive leadership and/or board-level committees.

Prior experience in healthcare, regulatory compliance, and audit frameworks preferred.

• Licensure and/or Certification:

CISSP required. Additional certifications such as CISM, CISA, CRISC, or equivalent strongly preferred.

• Skills:

• Proven ability to operate strategically while executing operational tasks in a resource-constrained environment.
• Deep technical understanding of security architecture, identity and access management, network security, and endpoint protection.
• Strong knowledge of regulatory requirements (HIPAA, HITECH), security frameworks (NIST, HITRUST), and audit processes.
• Excellent verbal and written communication skills with the ability to present technical concepts to non-technical audiences. Must be able to communicate in English.
• Strong leadership, influence, and collaboration skills across diverse teams and levels of the organization.
• Highly organized, detail-oriented, and capable of managing multiple competing priorities effectively
• Excellent customer service skills.
• Ability to maintain confidential information.