Responsibilities

We need to produce HTML fragment with sections: About the role? The posting includes description of responsibilities, qualifications, etc. We need to use

for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections when posting has real specific content. We have responsibilities content, qualifications content, skills/knowledge/abilities content. Also maybe "About the role" could be the introductory paragraph describing CISO role. That is substantive. Benefits, Pay, Schedule not present, so omit those sections. Also we should not repeat job title as heading. Also we should not include metadata like Job ID. Also remove boilerplate like EEO, etc. The posting includes EEO statement at end; we should remove that. Also remove navigation/legal etc. The paragraph about Baptist Health Care description is okay as part of About the role maybe. We'll produce sections: About the role (intro paragraph), Responsibilities (list of duties), Qualifications (education, experience, certifications), Skills (knowledge and abilities). Use

• for any list of duties/requirements/benefits. For qualifications we might have list items for education, experience, certifications. For skills we list items. We need to preserve all substantive information, not invent or summarize away detail. Must not omit details. So we need to capture all bullet-like sentences. Let's extract responsibilities list: - Builds a strategic and comprehensive information security program that defines, develops, maintains and implements policies and processes that enable consistent, effective information security practices which minimize risk and ensure the integrity, confidentiality and availability of information that is owned, controlled and processed within the organization. - Ensures information security policies, standards, and procedures are up to date. - Evaluates security trends, evolving threats, risks and vulnerabilities and applies tools to mitigate risk as necessary. - Familiar with sourcing information from DHHS, AHCA, NIST, PCI, ISO, Joint Commission and other regulatory and standards bodies. - Leads the organization's cybersecurity incident preparedness and response program, including cyber crisis management, ransomware readiness, incident response planning, tabletop exercises, recovery validation, and post-incident lessons learned activities. - Collaborates with organization senior management, Privacy Officer, and Corporate Compliance officer to establish governance for the security program. - Is responsible for initial and periodic information security risk assessment/analysis, mitigation and remediation. - Responsible for development and implementation of security risk management plan. - Ensure organization has audit controls to monitor activity on electronic systems that contain or use electronic protected health information. - Ensure the organization has and maintains appropriate system use and disclosure / confidentiality statement. - Participates in the development, implementation, and ongoing compliance monitoring of all BA's and business associate agreements, to ensure -security concerns, requirements, and responsibilities are addressed. - Assists Privacy Officer as needed with breach determination and notification processes under HIPAA and applicable State breach rules and requirements. - Maintains current knowledge of applicable federal and state security laws, licensing and certification requirements and accreditation standards. - Serves as information security consultant to all departments for all data security related issues with understanding of advancing technologies including Encryption, Clinical Device Convergence, Bring-Your-Own-Device (BYOD), premise and with cloud-based computing. - Attains all agreed to goals and objectives within specified time frames, as part of the organization’s overall mission. - Oversees third-party security assessments and vendor risk management programs. - Establishes cybersecurity requirements for vendors, business associates, cloud providers, and strategic partners. - Evaluates independent security attestations including HITRUST, SOC 2 Type II, ISO 27001, and NIST alignment. - Present cybersecurity risk reports to executive leadership and board committees - Establish security metrics and maturity benchmarks - Effectively communicates departmental, organization, and industry information to staff. - Develops cybersecurity standards for connected medical devices and clinical technologies. - Partners with Clinical Engineering, Biomedical Services, and clinical leadership to manage cybersecurity risks associated with medical equipment. Qualifications: - Minimum Education Bachelor's Degree in Information Security, Computer Science, Information Technology, Healthcare Informatics, or related field required. Master's Degree preferred. - Minimum Work Experience Minimum 7 years of progressive information security, cybersecurity, risk management, or technology leadership experience, including at least 5 years in an information security leadership role within a complex healthcare environment. - Licenses and Certifications Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified in Healthcare Privacy and Security (CHPS), Healthcare Information Security and Privacy Practitioner (HCISPP), and/or Certified in Risk and Information Systems Control (CRISC) are preferred. Skills, Knowledge And Abilities: - Knowledge and experience in state and federal information security laws, including but not limited to HIPAA, including NIST, PCI and all other applicable regulation. - Demonstrated organization, facilitation, written and oral communication, and presentation skills. - Self-starter who is results oriented, with a willingness and desire to work with and through others to accomplish departmental and organizations objectives. - A team player who is able to work well with all levels of the organization. - Politically savvy with a high tolerance for ambiguity and can work successfully in a matrix management model. - Proven organizational, leadership and consensus-building skills related to developing a shared vision among diverse stakeholders, systems-thinking, innovation, and the guiding and implementation of successful strategies and enterprises within a complex system in a competitive marketplace. About the role: The first paragraph: "The Chief Information Security Officer (CISO) is responsible for the strategic leadership, governance, and execution of Baptist Health Care's enterprise cybersecurity program. The CISO establishes and maintains a comprehensive information security program designed to protect the confidentiality, integrity, and availability of organizational information assets, technology systems, connected medical devices, and digital services while enabling clinical, operational, and business objectives. The CISO leads cybersecurity strategy, cyber risk management, regulatory compliance, security operations, incident response, business resilience, third-party risk, and security awareness initiatives across the enterprise. The position works under the direction of the Vice President and Chief Information Officer with support from the General Counsel and Chief Compliance Officer." Also there is description of Baptist Health Care: "Baptist Health Care is a not-for-profit health care system committed to improving the quality of life for people and communities in northwest Florida and south Alabama. The organization includes three hospitals, four medical parks, Andrews Institute for Orthopaedic & Sports Medicine, and an extensive primary and specialty care provider network. With more than 4,000 team members, Baptist Health Care is one of the largest non-governmental employers in northwest Florida." We could include that in About the role or maybe separate but we only have allowed headings. Could put that in About the role as additional paragraph. We must not include EEO boilerplate etc. So we will omit the final paragraphs about Equal Opportunity Employer, background check, etc. Now produce HTML:

  About the role

  ...

  Responsibilities

  • ... each responsibility as separate li

  Qualifications

  • ... education
  • ... experience
  • ... certifications

  Skills

  • ... each skill
  We should not include Benefits, Pay, Schedule. Make sure to preserve all details exactly as in text. Need to be careful not to lose any nuance. Let's craft each li. Responsibilities list items: 1. Builds a strategic and comprehensive information security program that defines, develops, maintains and implements policies and processes that enable consistent, effective information security practices which minimize risk and ensure the integrity, confidentiality and availability of information that is owned, controlled and processed within the organization. 2. Ensures information security policies, standards, and procedures are up to date. 3. Evaluates security trends, evolving threats, risks and vulnerabilities and applies tools to mitigate risk as necessary. 4. Familiar with sourcing information from DHHS, AHCA, NIST, PCI, ISO, Joint Commission and other regulatory and standards bodies. 5. Leads the organization's cybersecurity incident preparedness and response program, including cyber crisis management, ransomware readiness, incident response planning, tabletop exercises, recovery validation, and post-incident lessons learned activities. 6. Collaborates with organization senior management, Privacy Officer, and Corporate Compliance officer to establish governance for the security program. 7. Is responsible for initial and periodic information security risk assessment/analysis, mitigation and remediation. 8. Responsible for development and implementation of security risk management plan. 9. Ensure organization has audit controls to monitor activity on electronic systems that contain or use electronic protected health information. 10. Ensure the organization has and maintains appropriate system use and disclosure / confidentiality statement. 11. Participates in the development, implementation, and ongoing compliance monitoring of all BA's and business associate agreements, to ensure security concerns, requirements, and responsibilities are addressed. 12. Assists Privacy Officer as needed with breach determination and notification processes under HIPAA and applicable State breach rules and requirements. 13. Maintains current knowledge of applicable federal and state security laws, licensing and certification requirements and accreditation standards. 14. Serves as information security consultant to all departments for all data security related issues with understanding of advancing technologies including Encryption, Clinical Device Convergence, Bring-Your-Own-Device (BYOD), premise and with cloud-based computing. 15. Attains all agreed to goals and objectives within specified time frames, as part of the organization’s overall mission. 16. Oversees third-party security assessments and vendor risk management programs. 17. Establishes cybersecurity requirements for vendors, business associates, cloud providers, and strategic partners. 18. Evaluates independent security attestations including HITRUST, SOC 2 Type II, ISO 27001, and NIST alignment. 19. Present cybersecurity risk reports to executive leadership and board committees 20. Establish security metrics and maturity benchmarks 21. Effectively communicates departmental, organization, and industry information to staff. 22. Develops cybersecurity standards for connected medical devices and clinical technologies. 23. Partners with Clinical Engineering, Biomedical Services, and clinical leadership to manage cybersecurity risks associated with medical equipment. Note: Some items start with lowercase verbs; we keep as is. Qualifications: - Minimum Education Bachelor's Degree in Information Security, Computer Science, Information Technology, Healthcare Informatics, or related field required. Master's Degree preferred. - Minimum Work Experience Minimum 7 years of progressive information security, cybersecurity, risk management, or technology leadership experience, including at least 5 years in an information security leadership role within a complex healthcare environment. - Licenses and Certifications Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified in Healthcare Privacy and Security (CHPS), Healthcare Information Security and Privacy Practitioner (HCISPP), and/or Certified in Risk and Information Systems Control (CRISC) are preferred. Skills: - Knowledge and experience in state and federal information security laws, including but not limited to HIPAA, including NIST, PCI and all other applicable regulation. - Demonstrated organization, facilitation, written and oral communication, and presentation skills. - Self-starter who is results oriented, with a willingness and desire to work with and through others to accomplish departmental and organizations objectives. - A team player who is able to work well with all levels of the organization. - Politically savvy with a high tolerance for ambiguity and can work successfully in a matrix management model. - Proven organizational, leadership and consensus-building skills related to developing a shared vision among diverse stakeholders, systems-thinking, innovation, and the guiding and implementation of successful strategies and enterprises within a complex system in a competitive marketplace. About the role paragraph: combine first paragraph and Baptist Health Care description. Let's craft: "The Chief Information Security Officer (CISO) is responsible for the strategic leadership, governance, and execution of Baptist Health Care's enterprise cybersecurity program. The CISO establishes and maintains a comprehensive information security program designed to protect the confidentiality, integrity, and availability of organizational information assets, technology systems, connected medical devices, and