Sr. Manager, Security Operations & Governance

Hiring a SENIOR MANAGER, SECURITY OPERATIONS & GOVERNANCE with prior experience in healthcare industry, Microsoft environment (365, Intune, Azure Security) and coordinating remediation across technical teams, vendors, business owners, and compliance stakeholders.

Location:

100% remote in US

Duration: 6-12 month contract

Pay: $70-80/hr W2

This role will serve as the primary owner for security findings, remediation plans, vulnerability items, audit actions, risk exceptions, and enterprise security obligations. The position requires a hands‑on leader who can translate security findings into practical action plans, assign ownership, track execution, validate evidence, elevate blockers, and drive closure across IT, compliance, vendors, and business stakeholders.

The ideal candidate is not only able to organize and execute a security program but is also a security‑minded operator who can work directly with technical teams on identity, endpoint, cloud, network, application, infrastructure, SaaS, and healthcare system risks.

• Own the security remediation backlog, including enterprise security findings, IOPs, vulnerability items, audit actions, risk assessments, control gaps, exceptions, and assessment findings.
• Drive remediation from intake through closure by creating clear action plans with owners, due dates, dependencies, evidence requirements, risks, and escalation paths.
• Maintain a centralized remediation tracker, risk register, exception log, evidence repository, and executive status reporting for open security obligations.
• Lead recurring remediation reviews with infrastructure, cloud, endpoint, application, network, data, compliance, and vendor teams to ensure progress and accountability.
• Challenge unclear ownership, stalled work, weak evidence, missed deadlines, and incomplete remediation plans.
• Escalate blockers and risks to IT leadership, Enterprise Security, Compliance, and business owners when remediation is delayed or requires risk acceptance.
• Validate remediation evidence before closure, including screenshots, configuration exports, tickets, logs, reports, policy updates, testing results, and vendor attestations.
• Translate technical findings into practical, prioritized work that operational teams can execute without unnecessary complexity.

• Lead security operations activities, including alert triage, investigation, containment, escalation, recovery, and post‑incident review.
• Serve as incident commander or technical lead for security events affecting clinical operations, patient data, business continuity, or critical applications.
• Maintain incident documentation, evidence, playbooks, tabletop exercises, and after‑action tracking.
• Partner with Compliance/Privacy on PHI related investigations, documentation, and reporting requirements.
• Lead vulnerability lifecycle management, including intake, validation, prioritization, ticketing, remediation follow‑up, SLA adherence, aging reporting, and closure evidence.
• Coordinate with application, infrastructure, cloud, network, and vendor owners to remediate application, website, domain, certificate, configuration, cloud, server, endpoint, and external exposure findings.
• Manage and improve security practices across identity, endpoint, email, cloud, network, server, SaaS, and application environments.
• Oversee operational use of Microsoft 365 security, Entra , Intune, Defender, Sentinel, Azure security, EDR/XDR, SIEM, vulnerability management tools, and related logging or investigation capabilities.
• Partner with infrastructure, cloud, and network teams on secure administration, segmentation, firewall standards, NAC, remote access, vendor access, and external exposure management.
• Drive endpoint and workstation security improvements, including EDR coverage, encryption, patching, device compliance, configuration baselines, and exception handling.
• Ensure security telemetry from endpoints, identity, email, cloud, EHR, Salesforce, and critical infrastructure is available for monitoring, investigation, and audit evidence.
• Support access management governance, including onboarding/offboarding controls, periodic access reviews, privileged access, service accounts,…