What are the responsibilities and job description for the Manager - Emerging Tech Security | Medical Device Security position at Henry Ford Health - Careers?
GENERAL SUMMARY:
Reporting to the Director of Emerging Technology Security, the Manager of Emerging Technology Security leads and oversees the comprehensive security program for artificial intelligence systems and cloud infrastructure within our healthcare institution. This position provides strategic direction and operational leadership for a team of security professionals dedicated to protecting AI/ML deployments and cloud environments while ensuring compliance with healthcare regulations and security bestpractices. The Manager of AI and Cloud Security is responsible for developing, implementing, and maintaining sophisticated security programs that address the complex challenges of AI and cloud technologies in healthcare. This includes overseeing AI model security, training data protection, inference system monitoring, cloud security architecture, and cloud security operations. The role ensures seamless alignment between security controls and business objectives while maintaining strict regulatory compliance and enabling innovation. The position is a key leadership role within the IPSO department and works collaboratively with other managers in SOC, IPSO (Risk, Privacy, etc.), and IT programs to develop and implement comprehensive approaches to AI and cloud security risks. This includes establishing frameworks for secure AI development, deployment, and monitoring, as well as ensuring robust cloud security across multiple platforms and services.
PRINCIPLE DUTIES AND RESPONSIBILITIES:
Strategic Leadership and Team Management:
- Lead and mentor a diverse team of security professionals specializing in AI and cloud security.
- Foster a culture of innovation and continuous learning in emerging security practices.
- Develop and manage resource allocation strategies for AI and cloud security initiatives.
- Create and maintain career development paths for team members.
- Establish performance metrics and goals for the team.
AI Security Program Management:
- Develop and oversee comprehensive security strategies for AI/ML systems throughout their lifecycle.
- Establish frameworks for secure AI model development, testing, and deployment.
- Implement robust monitoring systems for detecting model tampering and adversarial attacks.
- Create and maintain security standards for training data protection and validation.
- Oversee security assessments of AI models pre and post-deployment.
- Develop incident response procedures specific to AI security incidents.
Cloud Security Operations:
- Direct the development and implementation of cloud security architecture across multiple platforms.
- Establish security baseline standards for cloud services and applications.
- Oversee the implementation of cloud security tools and controls.
- Manage cloud security posture monitoring and improvement programs.
- Develop and maintain cloud security policies and procedures.
- Support cloud security incident response and recovery efforts.
Risk Management and Compliance:
- Develop comprehensive risk assessment frameworks for AI and cloud technologies.
- Ensure compliance with healthcare regulations (HIPAA, HITECH) in AI and cloud deployments.
- Maintain security documentation and audit trails for compliance purposes.
- Conduct regular security assessments and vulnerability management.
- Create and maintain security metrics and reporting systems.
Strategic Planning and Innovation:
- Develop long-term strategic plans for AI and cloud security programs.
- Evaluate and implement new security technologies and approaches.
- Build relationships with security vendors and service providers.
- Participate in industry groups and standards organizations.
- Monitor emerging threats and trends in AI and cloud security.
EDUCATION/EXPERIENCE REQUIRED:
- Bachelor's Degree in Computer Science, Information Security, or related field required; Master's degree preferred.
- Minimum of eight (8) years of experience in information security with focus on medical device security.
- Minimum of three (3) years of management experience leading technical teams.
- Demonstrated experience with:
- AI/ML security principles and practices.
- Cloud security architecture and operations.
- Security program management.
- Team leadership and development.
Leadership and Management Expertise:
- Demonstrated ability to build and lead high-performing technical teams.
- Strong project and program management capabilities.
- Experience with budget planning and resource allocation.
- Strategic planning and execution skills.
- Risk management and decision-making abilities.
- Excellent stakeholder management and communication skills.
Technical Knowledge:
- Deep understanding of AI/ML security principles and best practices.
- Extensive knowledge of cloud security architectures and controls.
- Expertise in security automation and orchestration.
- Strong background in incident response and threat management.
- Understanding of healthcare compliance requirements.
- Knowledge of security frameworks and standards.
Technical Platforms and Tools
- AI Security:
- Model monitoring and protection platforms
- Training data validation systems
- MLOps security tools
- AI anomaly detection systems
- Model forensics platforms
- Cloud Security:
- Major cloud platform security tools (Azure Security Center, AWS Security Hub)
- Cloud security posture management (CSPM) solutions
- Cloud workload protection platforms (CWPP)
- Cloud access security brokers (CASB)
- Security information and event management (SIEM) platforms
CERTIFICATIONS/LICENSURES REQUIRED:
- At least two of the following certifications are required:
- CISSP (Certified Information Systems Security Professional).
- CISM (Certified Information Security Manager).
- Cloud Security Certification (CCSP, AWS Security, Azure Security).
- AI/ML Security Certification.
- CEH