Chief Information Security Officer

Site: Mass General Brigham Incorporated

Mass General Brigham relies on a wide range of professionals, including doctors, nurses, business people, tech experts, researchers, and systems analysts to advance our mission. As a not-for-profit, we support patient care, research, teaching, and community service, striving to provide exceptional care. We believe that high-performing teams drive groundbreaking medical discoveries and invite all applicants to join us and experience what it means to be part of Mass General Brigham.

Job Summary

The OpportunityAt Mass General Brigham Digital, we pride ourselves on our ability to create maximum strategic, clinical, and operational value from established and emergent technologies for our patients, care teams, researchers, and employees. Digital health will not only enhance the equity and efficiency of healthcare delivery, but it will also help make medicine more personalized and precise. Why Join Mass General Brigham?This is a rare opportunity to shape the future of one of the nation's leading integrated healthcare systems. The CISO will play a pivotal role in advancing digital transformation, cybersecurity, clinical innovation, and enterprise technology strategy while leading a talented team dedicated to improving patient care and advancing healthcare excellence.What Success Looks LikeThe ideal Chief Information Security Officer (CISO) will embody Mass General Brigham's commitment to exceptional leadership, innovation, collaboration, and accountability. This executive will inspire teams, build trusted partnerships, and drive transformative technology strategies that advance our mission of delivering world-class patient care, research, and operational excellence.Leadership CompetenciesPerformance-Focused LeadershipThe successful candidate will:

* Champion a customer- and patient-centered approach, fostering strong relationships and delivering technology solutions that enhance the patient and clinician experience.

* Navigate complexity with confidence, making sound decisions in dynamic and highly regulated environments.

* Foster a culture of innovation, continuously identifying new opportunities to improve organizational performance and outcomes.

* Demonstrate accountability by delivering on commitments and driving measurable results across the enterprise.

* Embrace continuous learning and adaptability, leveraging both successes and setbacks to improve organizational effectiveness.People-Focused LeadershipThe successful candidate will:

* Champion diversity, equity, inclusion, and belonging, recognizing the value of diverse perspectives in driving innovation and excellence.

* Build and develop high-performing teams that leverage diverse strengths to achieve shared goals.

* Foster collaboration across departments, organizations, and stakeholder groups to advance strategic priorities.

* Communicate with clarity and purpose, tailoring messages effectively for leaders, clinicians, staff, and external partners.

* Lead with integrity, authenticity, and transparency, inspiring confidence and trust at all levels of the organization.________________________________________Key Executive CompetenciesStrategic Leadership & VisionThe CISO will serve as a strategic partner to the Chief Digital & Information Officer (CDIO), helping shape and execute an integrated enterprise technology, cybersecurity, disaster recovery, and resilience strategy aligned with Mass General Brigham's long-term goals.Key responsibilities include:

* Co-developing and advancing a forward-looking technology vision that supports organizational growth, innovation, and operational excellence.

* Leveraging data, analytics, and market insights to inform strategic decision-making and investment priorities.

* Identifying emerging technologies and industry trends to position the organization as a leader in healthcare innovation.

* Balancing transformational ambition with organizational readiness to ensure scalable, sustainable change.

* Promoting entrepreneurial thinking and continuous improvement across the technology enterprise.Operational Excellence & ExecutionThe successful leader will have a proven ability to translate strategy into action while delivering measurable business results.They will:

* Establish clear priorities, performance expectations, and accountability measures across the organization.

* Lead effectively through ambiguity and complexity, guiding teams through change and transformation.

* Make informed, data-driven decisions while appropriately balancing risk and opportunity.

* Demonstrate sound judgment, transparency, and integrity in all aspects of leadership.

* Drive execution with urgency, discipline, and a focus on outcomes.________________________________________Talent Leadership & Team DevelopmentThe CISO will be recognized as an exceptional people leader with a strong track record of building, developing, and retaining high-performing teams.They will:

* Attract and cultivate top technology talent.

* Foster an inclusive culture where diverse perspectives are valued and individuals can thrive.

* Mentor and develop future leaders through coaching, succession planning, and professional growth opportunities.

* Encourage resilience, adaptability, and continuous improvement throughout the organization.

* Lead by example, demonstrating humility, self-awareness, and a commitment to ongoing learning.Influence, Collaboration & Relationship BuildingSuccess in this role requires exceptional interpersonal skills and the ability to build trusted relationships across a highly matrixed organization.The ideal candidate will:

* Establish strong partnerships with executive leadership, clinical leaders, research teams, and operational stakeholders.

* Communicate complex concepts clearly and effectively to both technical and non-technical audiences.

* Inspire confidence and engagement through authenticity, credibility, and emotional intelligence.

* Create a shared sense of purpose and direction that motivates teams and stakeholders to achieve common goals.

* Celebrate team successes and foster a culture of collaboration and mutual respect.Sustainability & Long-Term Value CreationThe CISO will ensure technology investments and initiatives create enduring value for patients, caregivers, employees, communities, and the organization.They will:

* Integrate business, social, environmental, and operational considerations into strategic decision-making.

* Promote responsible innovation and sustainable technology practices.

* Balance short-term priorities with long-term organizational health and resilience.

* Engage stakeholders to ensure technology strategies deliver broad and meaningful impact.

* Lead transformative initiatives that strengthen organizational performance and create lasting competitive advantage.

Qualifications

The CISO’s Key Responsibilities will include:

• Effective Information Risk Management: Create a risk aware culture ensuring that information risk is owned by relevant parts of the business to enable control and enable investments in bold innovations.
• Mature Security Capabilities: Focus on the protection of confidentiality, integrity and availability of 
information to enable the safe and secure communication of patient interactions so that MGB continues to lead the way in academic and community healthcare.

Secure & Resilient Platforms: Secure and resilient solutions that underpin the experience-led digital transformation across MGB, whilst enhancing our crisis management capability for better preparedness.

Data Privacy Compliance: Compliance with relevant statutory and regulatory requirements to support MGB’s expanded reach into new markets.

Additional Responsibilities:

• Accountable for the end-to-end overall direction and strategy of MGB’s Security function in close collaboration and alignment with the CIDO’s leadership team and enterprise stakeholders; manage the relationship with Risk and Audit committees and the Board of Directors on Cyber Security issues and policies.
• Optimize effective security and privacy governance to ensure complete security of MGB’s data. 
• Drive security and risk processes throughout MGB to create a security-savvy workforce and implement processes that create self-service capability with a focus on simplification, speed and automation.
• Contribute to security product and architecture currency by remaining relevant to any evolving threat landscape and respond swiftly to mitigate exposure to new threats and vulnerabilities.
• Manage third-party connectivity models, standards, assessments and relationships for MGB.
• Support and partner with peer delivery organizations within the CIDO’s organization to drive secure digitally-native solutions without being a road-block.
• Lead strategic security planning to achieve business goals, including the ability to articulate ideas to both technical and non-technical groups, and business case justifications for security spending initiatives.
• Establish and maintain a strong partnership with technology peers, enterprise risk management, privacy, audit and other leaders throughout the business to support the development and implementation strategies that adhere to the enterprise risk tolerance. The security team will need to anticipate technology shifts that keep peer organizations competitive, yet driving these innovated solutions without compromising security posture. 
• Leading through influence will be a critical competency to ensure that security is embraced pervasively throughout the MGB enterprise.
• Continuously improve existing security standards across the organization to maintain a competitive edge within the market and remain current to the changing threat landscape.
• In conjunction with other technology leaders, develop, implement and maintain department policies and standards designed to maximize effectiveness and minimize costs related to the acquisition, implementation and operation of enterprise applications and infrastructure systems in a secure manner.
• Ensure security standards and implementation of cloud platform controls across GCP, Azure and Microsoft.
• Lead acquisition and divestiture cyber due diligence to ensure M&A integration activities are completed securely, on time and within budget.
• Partner with internal and external clients to ensure a high degree of system security.
• Proactively update security and technology skill sets. Stay well-informed of technological advances and continuously research better ways to accomplish tasks, and integrate new security technologies.
• Maintain a constructive, team-oriented and customer-focused attitude at all times and in all settings.
• Recruit and develop talent that will drive the organization to higher performance.
• This role is accountable to maintain technical compliance to regulations, standards, and certifications such as NIST, SOX, PCI and HIPAA.

Qualifications

• 2x weekly onsite or more if needed for business needs.
• Master's Degree Health Administration required
• Can this role accept experience in lieu of a degree? No
• Excellent leadership, interpersonal, and communication skills, with the ability to lead and inspire a team.
• Exceptional strategic and analytical skills, with the ability to develop and implement effective healthcare solutions. In-depth knowledge of healthcare regulations, policies, and standards.
• Exceptional business acumen, with the ability to develop and execute successful business strategies.
• Ability to work well under pressure, meet deadlines, and manage multiple projects simultaneously 8-10+ years preferred

Financial and supervisory duties

• Has oversight of ~45 employees
• $18m OPEX

Working Model Required

• M-F Eastern Business Hours required
• Hybrid required 2x weekly or more in office onsite for, stakeholder meetings or business needs, must be flexible business needs
• A quiet, secure, compliant workspace is required for remote workdays, and will be viewed and confirmed via Microsoft Teams Video

Hybrid399 Revolution Drive40RegularDay (United States of America)0100 Mass General Brigham Incorporated is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religious creed, national origin, sex, age, gender identity, disability, sexual orientation, military service, genetic information, and/or other status protected under law. We will ensure that all individuals with a disability are provided a reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. To ensure reasonable accommodation for individuals protected by Section 503 of the Rehabilitation Act of 1973, the Vietnam Veteran’s Readjustment Act of 1974, and Title I of the Americans with Disabilities Act of 1990, applicants who require accommodation in the job application process may contact Human Resources at (857)-282-7642.

Mass General Brigham Competency Framework