Applied online in early March 2021, received a screening email from internal recruiter 17 days later. Submitted response, and received rejection email eight days later. Note this is for the role “Director-Information Security - IT Security CISO”. Wait, you have the Chief Information Security Officer (CISO) at a director level? And can not be bothered to have a conversation, rather just have a pre-canned question/response via email? Note that John Muir Health was advertising for a CISO in fall of 2013, with previous CISOs since that time being at the VP level. With this sort of approach to finding a new leader of their Information Security program, and the demotion of the role, it brings the question as to why does John Muir Health not appreciate the business value of their Information Security business risk management program?