Director, Cyber Risk Management & Governance

Penn Medicine

Philadelphia (Philadelphia County)

Hybrid

USD 180,000 - 250,000

Full time

4 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

Penn Medicine’s Corporate Services, in Philadelphia, seeks a Director of Cybersecurity Risk Management to define and lead the enterprise risk program. You will translate cyber risks into business decisions, guide risk treatment, and align with senior leadership across disciplines.

In this role you will integrate threat intelligence, quantify risk, and drive governance across the organization, partnering with IT, compliance, privacy, legal, and business stakeholders to reduce exposure while

Qualifications

Bachelor's degree is required.
10+ years of IT and cybersecurity experience, with a minimum of 3 years within Sr. Leadership experience is required.
3+ years of Cybersecurity Governance, Risk, and Compliance is required.

Responsibilities

Risk Aggregation and Quantification: maintain and evolve the enterprise cyber risk model across domains and quantify exposure.
Cyber Threat Intelligence (CTI) Triage: operate a threat intake workflow mapping intel to cyber risks.
Human Risk Oversight: lead governance forums and present human risk posture to executives.
Steering Committee Coordination: run Cyber Risk & Steering Committee, present risk posture and treatment plans.
KRi Thresholds & Playbooks: define risk metrics, thresholds, and playbooks with owners and timelines.