Senior Manager, Cyber Security

Building an AI-first organization is central to Clinisys’ purpose and the impact we deliver. As a global provider of intelligent diagnostic informatics solutions, we build AI-enabled, cloud-based platforms to enhance diagnostic workflows across healthcare, life sciences, and public health. By applying intelligent technology thoughtfully and responsibly, we help laboratories and testing environments operate more effectively, generate meaningful insights at scale, and ultimately support healthier and safer communities.

Operating across more than 30 countries, Clinisys expects all colleagues, regardless of role or function, to work confidently with AI-enabled tools, apply digital and analytical thinking, and continuously adapt as technologies evolve.

The Senior Manager of Cyber Security is a senior operational leader within the global Information Technology organization. Based in Raleigh, North Carolina US office, this role leads the day-to-day delivery and continuous improvement of Clinisys’ cyber security program across corporate technology, cloud and SaaS environments, products, and customer-facing services. The role translates cyber strategy, risk priorities, regulatory obligations, and customer commitments into clear plans, accountable execution, and measurable outcomes.

Working closely with the VP of IT / CIO | CISO, the Senior Manager will lead and develop cyber security professionals, coordinate activity across technology and business teams, and act as a trusted escalation point for cyber risk, incidents, control weaknesses, and remediation. The role combines people leadership, program ownership, and hands-on management oversight. Enterprise cyber strategy, final risk acceptance, and executive accountability remains with the CIO | CISO.

• Lead the effective operation of security monitoring, alert triage, detection, investigation, response, and escalation processes across corporate, cloud, product, and customer service environments.
• Maintain and exercise cyber incident response plans and playbooks, coordinating technical teams and partners during significant incidents and ensuring timely containment, evidence preservation, root cause analysis, communications support, and corrective actions.
• Oversee internal and outsourced security services, including service performance, monitoring coverage, alert quality, escalation paths, case management, and follow-through on identified improvements.
• Provide clear operational reporting on incidents, vulnerabilities, control health, remediation progress, recurring themes, and emerging threats; escape material risks or delays promptly.
• Participate in an appropriate leadership escalation rotation and support time-sensitive cyber incidents outside standard working hours when required.

• Operationalize the cyber security strategy, roadmap, policies, standards, and control framework established by the CIO | CISO, translating objectives into prioritized delivery plans and accountable work streams.
• Manage cyber risk and control-assurance activities, ensuring risks are clearly documented, assessed, assigned to accountable owners, supported by treatment plans, and escalated where exposure exceeds agreed tolerance.
• Coordinate evidence, remediation, and continuous-compliance activities supporting ISO 27001, SOC 2, Cyber Essentials Plus, GDPR, NHS requirements, customer obligations, Roper Technologies control criteria, and other applicable standards or attestations.
• Partner with Legal, Privacy, Compliance, Internal Audit, and business stakeholders to ensure security requirements are understood, implemented, evidenced, and maintained.
• Lead or support internal and external audits, control assessments, customer reviews, penetration-test follow-up, and regulatory or contractual assurance activities.

• Oversee vulnerability management across infrastructure, endpoints, cloud services, applications, and products, including scanning coverage, risk-based prioritization, remediation tracking, exception management, and reporting.
• Coordinate independent penetration testing and security assessments; ensure findings are translated into practical remediation plans with clear owners, target dates, and escalation for overdue high-risk items.
• Partner with IT Operations, Cloud Operations, Enterprise Architecture, Product, and Engineering teams to embed proportionate…