Senior Cybersecurity Manager

ORION GROUPS is a professional services firm based in McKinney, Texas that provides experienced consultants to key organizations across the United States. We focus our talent expertise in both the financial and healthcare industries. Our capabilities in technology include application management, enterprise software systems, data strategies, integration, and IT infrastructure. We work diligently to listen and provide value to your unique needs.

Orion Groups is seeking a Senior Cybersecurity Manager to manage the security governance programs, SOX IT controls coordination, customer and vendor security reviews, client-facing security engagements, regulatory and compliance assessments, and cross-functional security initiatives. This opportunity will act as the single point of contact (SPOC) for security governance matters across large enterprise healthcare systems.

• Duration: 12-month W2 contract-to-hire
• Location: Fully Remote in the United States
• Salary: $160,000 -- 180,000 base plus 15% bonus and benefits

• Lead security governance activities, ensuring adherence to corporate security policies, regulatory requirements, and industry best practices.
• Coordinate and manage SOX IT General Controls (ITGC) activities, control testing, remediation efforts, evidence collection, and audit support.
• Support internal and external audits, including SOX, SOC, client audits, and regulatory assessments.
• Track compliance initiatives and monitor remediation activities through completion.
• Facilitate governance forums and provide regular updates to executive leadership.
• Serve as the primary security representative and partner with Sales, Client Services, and Operations teams to address customer security requirements during contract negotiations and ongoing service delivery.
• Manage third-party security risk management processes as well as conduct security reviews and risk assessments for vendors, partners, and service providers.
• Strategic partnership with the hospital by serving as a primary liaison to the hospital's Enterprise Security, Risk, and Compliance organizations.
• Represent in enterprise security governance, risk management, and strategic planning activities.

• Experience in healthcare, revenue cycle management, or regulated industries.
• Experience supporting large-scale enterprise security programs and governance frameworks.
• Experience with the hospital or complex multi-entity healthcare environments.
• 10+ years of experience in Information Security, Risk Management, Compliance, Audit, or Governance.
• 5+ years of leadership or program management experience.
• Strong knowledge of: SOX IT Controls (ITGC), Security Governance & Compliance, Vendor Risk Management, Client Security Reviews and Due Diligence, and Risk Assessment Methodologies.
• Knowledge of SOC, NIST, ISO 27001, HIPAA, and healthcare security requirements.
• Experience working directly with customers, auditors, and executive stakeholders.

• Bachelor's degree in Information Security, Computer Science, Information Technology, Business Administration, or related field/experience;
  Master's degree is preferred
• Industry certifications such as: CISSP, CISM, CRISC, CISA or Security+

• Quick turnaround: preliminary interview followed by team interview on phone and Google Meets.
• Typically, three rounds with the hiring manager, joined by the team (virtual interview), possibly four rounds if necessary.

Orion Groups is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, sexual orientation, gender identity or any other characteristic protected by law. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment.