Technology and AI Risk, Manager

Thomas Jefferson University; Orlando (FL); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Tuition assistance

Retirement plans

Dental

Job summary

Thomas Jefferson University seeks a Manager, Technology, AI, and Security Risk to lead its Security Risk Assessment portfolio with hands-on technical focus. The role reviews architecture, design and controls of internal apps, AI-enabled systems, APIs, and cloud environments, translating findings into prioritized risk decisions.

Beyond technical work, the role oversees GRC components, including control framework management, regulatory assessments, external risk, and cloud posture management,

Qualifications

• Bachelor’s Degree in science, technology, engineering, or math discipline
• 7 years related work experience

Responsibilities

• Lead security architecture reviews for internally developed apps, AI systems, APIs, and cloud environments.
• Perform threat modeling and secure design reviews across the development lifecycle.
• Define assessment approach for AI/ML systems including data governance, prompt security, and guardrails.
• Evaluate and validate controls at application, integration, and infrastructure layers (authentication, encryption, logging).
• Own the Security Risk Assessment portfolio end to end with rigorous methodology and reporting.
• Lead cloud security posture management, including configuration, IAM design, and asset visibility.
• Assess third‑party and medical device risk with attention to technical interfaces and data exchange.
• Maintain the cyber risk register and translate findings into risk decisions.
• Drive remediation of findings from reviews, assessments, audits, and testing.
• Ensure compliance with HIPAA, NIST, PCI and update secure-design standards as needed.
• Partner with engineering, cloud, data, and AI teams to embed security into system design and operation.
• Advance AI enablement with AI-assisted automation to strengthen efficiency and scale.

Skills

Security architecture reviews

Threat modeling

Risk assessment

GRC management

Education

Bachelor's degree in STEM

Job description

Number of Positions In Requisition 1 Job Details

The Manager, Technology, AI, and Security Risk leads the organization's Security Risk Assessment portfolio with a hands-on technical and security architecture focus. The role is accountable for reviewing the architecture, design, and controls of internally developed applications, AI-enabled applications and agents, APIs and integrations, cloud environments, and external connections, and for turning those technical findings into clear, prioritized risk decisions.

Alongside this technical work, the manager owns the broader Governance, Risk, and Compliance (GRC) components of the portfolio, including control framework management, enterprise and regulatory assessments, external and third-party risk, cyber risk management, issues management, and cloud security and posture management, as well as the GRC platform and its AI-enablement capabilities. The position exists to ensure that as the organization expands its internal development and adoption of AI, it designs, builds, and operates those systems securely and in line with applicable legal and regulatory requirements.

Job Duties

• Lead security architecture reviews across internally developed applications, AI systems and agents, APIs, and cloud environments, assessing design, data flows, trust boundaries, and control coverage both before and after deployment.
• Perform and oversee threat modeling and secure design reviews for custom-built and AI-enabled applications throughout the development lifecycle, identifying design-level weaknesses and driving fixes into engineering work.
• Define the technical assessment approach for AI and machine learning systems, covering model and data governance, prompt and agent security, guardrails, output validation, and misuse scenarios.
• Evaluate and validate security controls at the application, integration, and infrastructure layers, including authentication, authorization, encryption, logging, segmentation, and secrets management.
• Own the Security Risk Assessment portfolio end to end, ensuring a consistent and technically rigorous methodology, prioritization, and reporting across control framework management, enterprise and regulatory assessments, external and third-party risk, cyber risk, issues management, and cloud posture.
• Lead cloud security posture management, including configuration and hardening review, identity and access design, and asset and attack-surface visibility.
• Assess third-party, medical device, and B2B integration risk with real attention to the technical interfaces, data exchange, and connectivity involved, not just questionnaire responses.
• Maintain the cyber risk register and apply quantitative analysis to technical findings, translating architecture and control gaps into decision-ready risk.
• Drive remediation of findings from architecture reviews, assessments, audits, and testing through to validated technical closure.
• Ensure applications and platforms meet information security policies, standards, and applicable regulatory frameworks (e.g., HIPAA, NIST, PCI), and inform updates to technical and secure-design standards as technology and threats evolve.
• Partner with engineering, cloud, data, and AI teams to embed security into how systems are designed, built, and run, advancing internal development and AI enablement securely.
• Advance AI enablement across the team, applying AI-assisted automation to assessment, architecture review, and reporting workflows to strengthen efficiency gains and scale the portfolio's output.

Organizational Impact

Establishes and works to implement key elements of tactical and operational plans with measurable contribution towards the achievement of results of the job area or completion of a project. Makes significant decisions on what their team of responsibility focuses on or executes as directed. Focus is on short-term operational plans (e.g., 1 year or less). Develops new products, processes, standards or operational plans in support of the job area strategy. May have budget or P&L accountability for area of responsibility. Manage resources or elements of the budget.

Innovation & Complexity

Responsible for making moderate to significant improvements of processes, systems or products to enhance performance of job area. May also demonstrate technical innovation in supporting business objectives. Problems and issues faced are numerous and typically undefined, and require detailed information gathering, analysis and investigation to understand the problem. Problems are difficult and moderately complex. Problems typically impact multiple job areas or specialties. Problems are typically solved through drawing from prior experience and analysis of issues. Executes on moderately complex tasks to enhance simplicity and standardization across Jefferson.

Communication & Influence

Communicates with parties within and outside of own job area, which may include external customers or vendors. Requires the ability to influence others outside of own job area on policies, practices and procedures.

Minimum Qualifications

• Bachelor’s Degree in science, technology, engineering, or math discipline
• 7 years related work experience

Physical Demands

Lift and carry 25 lbs. frequent sitting/standing, frequent keyboard use, *patient care providers may be required to perform activities specific to their role including kneeling, bending, squatting and performing CPR.

Job Description Disclaimer

This position description provides the major duties/responsibilities, requirements and working conditions for the position. It is intended to be an accurate reflection of the current position, however management reserves the right to revise or change as necessary to meet organizational needs. Other responsibilities may be assigned when circumstances require.

Work Shift

Workday Day (United States of America)

Location

Primary Location Address 1100 Virginia Drive, Fort Washington, Pennsylvania, United States of America Nationally ranked, Jefferson, which is principally located in the greater Philadelphia region, Lehigh Valley and Northeastern Pennsylvania and southern New Jersey, is reimagining health care and higher education to create unparalleled value. Jefferson is more than 65,000 people strong, dedicated to providing the highest-quality, compassionate clinical care for patients; making our communities healthier and stronger; preparing tomorrow's professional leaders for 21st-century careers; and creating new knowledge through basic/programmatic, clinical and applied research. Thomas Jefferson University, home of Sidney Kimmel Medical College, Jefferson College of Nursing, and the Kanbar College of Design, Engineering and Commerce, dates back to 1824 and today comprises 10 colleges and three schools offering 200+ undergraduate and graduate programs to more than 8,300 students. Jefferson Health, nationally ranked as one of the top 15 not-for-profit health care systems in the country and the largest provider in the Philadelphia and Lehigh Valley areas, serves patients through millions of encounters each year at 32 hospitals campuses and more than 700 outpatient and urgent care locations throughout the region. Jefferson Health Plans is a not-for-profit managed health care organization providing a broad range of health coverage options in Pennsylvania and New Jersey for more than 35 years.

Equal Employment Opportunity

Jefferson is committed to providing equal educational and employment opportunities for all persons without regard to age, race, color, religion, creed, sexual orientation, gender, gender identity, marital status, pregnancy, national origin, ancestry, citizenship, military status, veteran status, handicap or disability or any other protected group or status.

Benefits

• medical (including prescription)
• supplemental insurance
• dental
• vision
• life and AD&D insurance
• short- and long-term disability
• flexible spending accounts
• retirement plans
• tuition assistance
• voluntary benefits

• Colleagues have access to tuition discounts at Thomas Jefferson University after one year of full time service or two years of part time service.
• All colleagues, including those who work less than part-time (including per diem colleagues, adjunct faculty, and Jeff Temps), have access to medical (including prescription) insurance.

Recruitment and Career Development

In keeping with Jefferson's Mission, We Improve Lives, it is our goal to recruit, retain, develop and reward highly-qualified employees. If you are enthusiastic, caring and dedicated to service excellence, we invite you to consider joining Jefferson. Jefferson encourages its employees to expand their knowledge and develop their careers through growth opportunities and continuing education. With a long standing history, Jefferson has been advancing the medical field from the heart of Center City Philadelphia for nearly 200 years. Our Mission, We Improve Lives, expands to every corner of the organization. From our weekly farmer’s market, to our new Jefferson Accelerator Zone for innovation, our employees’ passion for the community is evident by the daily gestures towards our patients, students and each other.