# Michael Ortenberg

Michael Ortenberg is a remote worker on Himalayas, Associate Director - GRC at Cognizant Technology Solutions, based in United States.

Source: https://himalayas.app/@michaelortenberg

```text
Healthcare privacy and compliance attorney at Cognizant who led incident-response governance and designed executive risk dashboards.
```

| Detail | Value |
| --- | --- |
| Availability | Looking for a job |
| Location | United States |
| Authorized to work in | United States |
| Salary expectations | 150k+ USD |
| Job categories | Attorney, Healthcare Compliance Officer, Privacy Officer, Information Security Consultant, Risk Manager |
| Skills | Healthcare Privacy, HIPAA Security, Privacy Incident Workflows, Privacy Investigations, HIPAA Risk Assessment, Third Party Risk, Enterprise Risk Management, Healthcare Regulatory Compliance, Privacy Governance, Security Governance, Regulatory Analysis, Breach Notification Laws, Remediation Governance, Contract Risk Analysis, Executive Reporting |
| LinkedIn | https://linkedin.com/in/michaelortenberg |

## About

```text
At Cognizant Technology Solutions, I led enterprise security and privacy incident-response governance, from investigation support and reporting obligations to remediation priorities and executive communications. I also designed Power BI dashboards to track risk, remediation status, SLA performance, and operational trends.

At Siemens Health Services (Cerner), I developed HIPAA privacy and security assessment methodologies and automated tools for healthcare organizations. I translated HIPAA, HITECH, state privacy requirements, and healthcare security standards into practical guidance.

Earlier, at Covansys (CBSI), I directed enterprise HIPAA risk assessments and developed privacy and information security governance frameworks. At Metalogics, Inc., I developed consulting methodologies for the firm's emerging HIPAA practice and an automated executive reporting platform.
```

## Experience

### Associate Director - GRC

[Cognizant Technology Solutions](https://himalayas.app/companies/cognizant). Jun 2015 - Jun 2026

```text
Led enterprise security and privacy incident-response governance, including investigation support and remediation priorities. Conducted over 300 third-party and due-diligence reviews and designed executive Power BI dashboards for risk evaluation.
```

### Principal Consultant

[Siemens Health Services (Cerner)](https://himalayas.app/companies/siemens). Feb 2002 - Jun 2015

```text
Developed end-to-end HIPAA privacy and security assessment methodologies and conducted assessments for hospitals and healthcare organizations. Interpreted HIPAA, HITECH, and state privacy requirements into operational guidance.
```

### Senior Manager, Global Health Practice

Covansys (CBSI). Jan 2000 - Jan 2002

```text
Directed enterprise HIPAA privacy and security risk assessments for hospitals and health plans, identifying compliance gaps and delivering executive remediation strategies. Developed governance frameworks unifying HIPAA and GLBA requirements.
```

Skills: HIPAA, GLBA, Privacy, Security, Risk-Assessment, Governance, Compliance, Executive-Advisory, remediation

### Manager, Network Services / Mitigation Manager / Y2K Project Leader

Metalogics, Inc.. Jan 1998 - Jan 2000

```text
Developed standardized consulting methodologies that became the delivery framework for the firm's emerging HIPAA consulting practice. Developed an automated executive reporting platform for real-time engagement metrics.
```

Skills: Consulting, Methodology-Development, HIPAA, Executive-Reporting, Project-Management, Automation

## Education

### Columbus School of Law, The Catholic University of America

Juris Doctor, Law

```text
Juris Doctor (JD) degree from Columbus School of Law, The Catholic University of America.
```

### Virginia State Bar

Bar Membership, Law

```text
Active Bar Membership issued by the Virginia State Bar in June 1995.
```

### ISC2

Certified Information Systems Security Professional (CISSP), Information Security

```text
Certified Information Systems Security Professional (CISSP) issued by ISC2 in November 2013.
```

### Brandeis University

Bachelor of Arts, Linguistics and Cognitive Science

```text
Bachelor of Arts (BA) in Linguistics and Cognitive Science from Brandeis University.
```

### HITRUST

Certified CSF Practitioner, Healthcare Compliance

```text
Certified CSF Practitioner issued by HITRUST in October 2016.
```

## Tech stack

- Microsoft SharePoint
- Microsoft Teams
- SQL
- Power BI

To contact Michael, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [Laura User](https://himalayas.app/@laurauser4): Manager, Privacy & Security Services, Teleion
- [Ryan Gelshenen](https://himalayas.app/@ryangelshenen): Manager – Corporate Information Security, Penguin Random House
- [Brydee Neal](https://himalayas.app/@brydeeneal): Governance, Risk, and Compliance Lead, FIGS
- [Usman Riaz](https://himalayas.app/@usmanriaz3): Vice President Cybersecurity, Epicodeks
- [Rohit Malhotra](https://himalayas.app/@rohitmalhotra): Director of Cyber Risk, AbbVie
- [Melissa Thornton](https://himalayas.app/@melissathornton): Cybersecurity Consultant, Cybersecurity Advisory Group
- [Christina Ross](https://himalayas.app/@christinaross): Associate Director, IT Compliance, Texas Life Insurance Company
- [Hallelujah Adepitan](https://himalayas.app/@hallelujahadepitan): Principal Consultant (IT Security Auditor), Oracle Corporation
- [Heather Chartier](https://himalayas.app/@heatherchartier): Director, Health Information Management (HIM) ROI and Regulation, Cape Fear Valley Health System
- [Michael Gaudette](https://himalayas.app/@michaelgaudette): Tier 2 Field Technician, Cyber Advisors