The CISO is responsible for establishing and maintaining an enterprise information security management program to ensure that information assets are adequately protected.  The CISO will also be responsible for identifying, evaluating and reporting on information security risks in a manner that meets compliance and regulatory requirements, and aligns with and supports the risk posture of the enterprise.  H/she will proactively work with business units and IT functional areas to implement practices that meet defined policies and standards for information security.  The CISO serves as the process owner of all assurance activities related to the availability, integrity and confidentiality of patient, employee and corporate information in compliance with the organization's information security policies.  A key element of the CISO's role is also working with executive management to determine acceptable levels of risk for the organization.  H/she must be highly knowledgeable about the business environment and ensure that information systems are maintained in a fully functional secure mode.  Additionally, the CISO will be an internal consultant to organizational leadership regarding cybersecurity awareness and education.  The CISO will partner with the CTO and CASO to develop a new security engineering function for the organization.