• Development of tailored security concepts, architectures and solutions for safety-critical IT/OT environments • Performing risk analyses, threat assessments and vulnerability evaluations • Implementing sustainable IT/OT security processes for clients • Providing technical support throughout the entire security lifecycle of projects (analysis, design, implementation, audit, approval/certification)

• Design, develop, manage, and maintain secure infrastructure leveraging cloud technologies • Participate in IT projects providing security architecture and integration requirements • Respond to security-related incidents and service requests • Manage and maintain Web Application Firewalls (WAFs) and API Management Services • Collaborate with IT teams to ensure adequate security solutions and controls

• Design, develop, manage, and maintain a secure infrastructure leveraging cloud platform security technologies • Analyze existing cloud structures and create new security methods • Manage, configure, tune, and deploy cloud native policies to enhance security controls • Stay informed on current threats and probe for potential vulnerabilities • Collaborate with security and IT teams for mitigation plans

Thank you for considering a career at Ensemble! Ensemble is a leading provider of technology-enabled revenue cycle management solutions for health systems, including hospitals and affiliated physician groups. They offer end-to-end revenue cycle solutions as well as a comprehensive suite of point solutions to clients across the country. Ensemble keeps communities healthy by keeping hospitals healthy. We recognize that healthcare requires a human touch, and we believe that every touch should be meaningful. This is why our people are the most important part of who we are. By empowering them to challenge the status quo, we know they will be the difference! O.N.E Purpose: - Customer Obsession: Consistently provide exceptional experiences for our clients, patients, and colleagues by understanding their needs and exceeding their expectations. - Embracing New Ideas: Continuously innovate by embracing emerging technology and fostering a culture of creativity and experimentation. - Striving for Excellence: Execute at a high level by demonstrating our “Best in KLAS” Ensemble Difference Principles and consistently delivering outstanding results. The Opportunity: As Principal Cybersecurity, you will develop and drive the cybersecurity strategy by defining security requirements, developing secure cloud architectures, and performing Information Assurance (IA) verification and audits. You will be responsible for designing and overseeing the implementation of security measures to protect digital assets, networks, and systems from malicious attacks. In the performance of those duties, you will assess risks and vulnerabilities, investigate security breaches, create policies to protect sensitive data and evaluate adherence to industry best-practices for tools, processes, services, and ownership. Duties include: 1. Design and oversee the implementation of new security controls, processes and tools. 2. Lead the evaluation and use of security technologies and tools. 3. Develop, maintain and document configurations, policies and procedures. 4. Support the ongoing administration, design and user of network segmentation tools and underlying concepts for continuous risk reduction 5. Identify security issues and risks and develop mitigation plans. 6. Develop and socialize secure coding guidelines and best practices. 7. Create project deliverable documentation, including design, build and operations guide. 8. Identify gaps and propose solutions to increase security efficiency and effectiveness. 9. Support development of testing and evaluation plans, including cyber test activities. 10. Acts as a cybersecurity advisor for engineering teams, ensuring secure SDLC practices for enterprise applications. 11. Mentor teams on cybersecurity, fostering expertise in signaling security, secure protocol design, and network hardening. 12. Govern adoption of controls by the matrix organization. 13. Build a feedback loop, with metrics and internal/external stakeholder input, to enhance controls. Essential Job Functions - In partnership with IT and Compliance functions, create and lead a program-level playbooks and governance structures for cybersecurity operations, including risk mitigation and investment for controls. - Develop and implement an assessment model of cybersecurity operations to identify control gaps and enhancements to tools and processes, applying industry best-practices. - Develop and implement policies and standards to govern cybersecurity operations. - Develop and implement methods to monitor the operating effectiveness of cybersecurity operations. - Lead matrix adoption of corrective actions and enhancements to IT tools and processes. - Promote a culture of continuous improvement through employee education and awareness and internal/external stakeholder engagement. - This document is not an exhaustive list of all responsibilities, skills, duties, requirements, or working conditions associated with the job. - Associates may be required to perform other job-related duties as required by their supervisor, subject to reasonable accommodation. Employment Qualifications - 10+ years of relevant Cybersecurity experience - Bachelors Degree or equivalent experience (degree preferred in Computer Science) - 5+ years of software engineering experience. - 5+ years of experience in the healthcare industry. - 5+ years of experience in cybersecurity roles. - 5+ years of experience with HITRUST, SSAE 18, or other control frameworks. - Demonstrated ability for strategy development, and solution planning, analysis, and delivery. - Demonstrated ability to lead programs from initiation to closure, with impact across multiple business units, functional areas, services, markets, customers/vendors, and/or locations. - Demonstrated ability to communicate effectively with internal and external stakeholders, including senior leadership and all levels of management. - Demonstrated ability to create and govern policies and standards. - This position pays between $141,300-223,200 based on experience. - Must be inquisitive and demonstrate openness to innovation including AI to explore better processes and ways to alleviate friction and improve patient and client experiences. - This is a remote position; however, candidates must be willing and able to travel to and work onsite at client, temporary, or corporate office locations as business needs require. This posting addresses state specific requirements to provide pay transparency. Compensation decisions consider many job-related factors, including but not limited to geographic location; knowledge; skills; relevant experience; education; licensure; internal equity; time in position. A candidate entry rate of pay does not typically fall at the minimum or maximum of the role’s range. #LI-MT1 #LI-Remote Join an award-winning company Five-time winner of “Best in KLAS” 2020-2022, 2024-2025 Black Book Research's Top Revenue Cycle Management Outsourcing Solution 2021-2024 22 Healthcare Financial Management Association (HFMA) MAP Awards for High Performance in Revenue Cycle 2019-2024 Leader in Everest Group's RCM Operations PEAK Matrix Assessment 2024 Clarivate Healthcare Business Insights (HBI) Revenue Cycle Awards for strong performance 2020, 2022-2023 Energage Top Workplaces USA 2022-2024 Fortune Media Best Workplaces in Healthcare 2024 Monster Top Workplace for Remote Work 2024 Great Place to Work certified 2023-2024 - Innovation - Work-Life Flexibility - Leadership - Purpose + Values Bottom line, we believe in empowering people and giving them the tools and resources needed to thrive. A few of those include: - Associate Benefits – We offer a comprehensive benefits package designed to support the physical, emotional, and financial health of you and your family, including healthcare, time off, retirement, and well-being programs. - Our Culture – Ensemble is a place where associates can do their best work and be their best selves. We put people first, last and always. Our culture is rooted in collaboration, growth, and innovation. - Growth – We invest in your professional development. Each associate will earn a professional certification relevant to their field and can obtain tuition reimbursement. - Recognition – We offer quarterly and annual incentive programs for all employees who go beyond and keep raising the bar for themselves and the company. Ensemble is an equal employment opportunity employer. It is our policy not to discriminate against any applicant or employee based on race, color, sex, sexual orientation, gender, gender identity, religion, national origin, age, disability, military or veteran status, genetic information or any other basis protected by applicable federal, state, or local laws. Ensemble also prohibits harassment of applicants or employees based on any of these protected categories. Ensemble provides reasonable accommodations to qualified individuals with disabilities in accordance with the Americans with Disabilities Act and applicable state and local law. If you require accommodation in the application process, please contact TA@ensemblehp.com. This posting addresses state specific requirements to provide pay transparency. Compensation decisions consider many job-related factors, including but not limited to geographic location; knowledge; skills; relevant experience; education; licensure; internal equity; time in position. A candidate entry rate of pay does not typically fall at the minimum or maximum of the role’s range. Employment Disclaimers – Ensemble