Manager, Information Security

Responsibilities

• Overseeing the design, implementation, and management of comprehensive security strategies.
• Providing strategic direction, ensuring the protection of sensitive patient data.
• Leading efforts to enhance the organization's security posture.
• Developing and executing a strategic information security roadmap.
• Leading and mentoring a team of security analysts and engineers.
• Designing and implementing advanced security measures to safeguard the organization's infrastructure, applications, and data.
• Collaborating with cross-functional teams to embed security principles into projects, technologies, and initiatives.
• Conducting regular security assessments, vulnerability assessments, and penetration tests to evaluate and address risks.
• Managing security tools, including SIEM, intrusion detection systems, and antivirus solutions.
• Developing and enforcing information security policies, standards, and procedures, ensuring compliance with healthcare regulations (e.g., HIPAA).

• Bachelor's degree in Information Security, Computer Science, or related field (Master's preferred) OR 2 years of experience in risk analysis, information security, or a related field in the healthcare industry.
• Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Ethical Hacker (CEH), or equivalent.
• Minimum of 2 years of experience in information security, with significant experience in security management and team leadership.
• Deep knowledge of cybersecurity principles, technologies, and best practices.
• Strong understanding of networking concepts, operating systems, and security architecture.
• Proven experience in security architecture design, network segmentation, and access controls.
• Experience with security assessment tools, vulnerability scanners, and penetration testing methodologies.
• Extensive knowledge of healthcare regulations (e.g., HIPAA) and their application to security practices.
• Excellent leadership and team management skills, with the ability to mentor and develop security professionals.
• Strong communication and collaboration skills, with the ability to interact with technical and non-technical stakeholders.
• Track record of successfully driving security initiatives, compliance efforts, and incident response activities.

• Risk Analysis
• Security Assessment
• Vulnerability Scanning
• Penetration Testing
• Network Segmentation
• Access Controls
• Security Policy Development
• Incident Response
• Security Architecture
• Data Protection

• Leadership
• Team Management
• Communication
• Collaboration
• Mentoring

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Ethical Hacker (CEH)