Cybersecurity Specialist

Overview

1
JOB TITLE: CYBERSECURITY SPECIALIST

COMPANY OVERVIEW

Therapy Management Corporation (TMC) strives to be the preferred therapy provider and employer in all communities we serve. We make a positive difference by delivering compassionate, superior care to all. Our passionate commitment to service excellence creates loyal customers and cultivates the best working environment for our TMC family. Our success isbuilt on unwavering integrity, ethics, and an environment of innovation.

The Cybersecurity Specialist is responsible for helping protect TMC's systems, applications, cloud infrastructure, and sensitive data from security threats and vulnerabilities. This role combines hands-on security operations, cloud security, vulnerability management, and compliance monitoring with a focus on continuously improving TMC's overall security posture.

As a Cybersecurity Specialist, you are expected to support the organization and its technology through the security lifecycle:
Understand the environment:
Build a thorough understanding of TMC's applications,infrastructure, users, security controls, regulatory requirements, and evolving threat landscape. Protect the environment:
Implement, maintain, and improve security controls acrossTMC's Azure environment, applications, identities, endpoints, and supporting technology platforms. Monitor and respond:
Continuously monitor security systems and findings, investigate potential threats and vulnerabilities, coordinate remediation, and assist with incident response. Maintain compliance:
Ensure security controls remain effective and audit-ready by maintaining security and compliance platforms, evidence, documentation, policies, and remediation activities.

• Own the day-to-day administration, configuration, integration health, and continuous improvement of TMC's security platforms, with particular responsibility for Vanta and Aikido Security.
• Manage Vanta control monitoring, automated tests, evidence collection, access reviews,security findings, and audit-readiness activities.
• Manage Aikido Security capabilities including application security scanning, dependency analysis, secrets detection, infrastructure-as-code scanning, container security, and cloud security posture monitoring.
• Monitor and improve TMC's Microsoft Azure security posture, including identity and access controls, resource configuration, logging, network protections, and cloud security controls.
• Configure and maintain applicable Microsoft security technologies such as Microsoft Defender for Cloud, Microsoft Entra , Azure Key Vault, Azure Policy, Azure Monitor, and Microsoft Sentinel.
• Review security findings and vulnerabilities, assess their severity and business risk,prioritize remediation, and verify resolution.
• Coordinate security remediation with development, Dev Sec Ops , infrastructure, and other technology teams.
• Review identity and access controls to support least-privilege access, appropriate authentication controls, privileged-access management, and secure application identities.
• Monitor security alerts and events, investigate suspicious activity, esc...
• Support TMC's compliance with applicable security and healthcare standards, includingHIPAA, SOC 2, and HITRUST, by monitoring control effectiveness, identifying gaps, and coordinating corrective actions.
• Support internal and external audits by maintaining security evidence, responding to findings, and ensuring corrective actions are tracked to completion.
• Assist with third-party security reviews, vendor risk assessments, security questionnaires,and other security-assurance activities as needed.
• Develop and maintain security dashboards, reports, procedures, runbooks, and technical documentation.
• Automate repetitive security monitoring,…