Manager IS Cyber Security

Manager IS Cyber Security at Northwestern Memorial Hospital

Salary range: $74.87 - $97.33 per hour. Placement within the salary range depends on experience and internal equity.

Remote work from Illinois, Wisconsin, Indiana, Missouri, Iowa, or Ohio.

• $10,000 Tuition Reimbursement per year ($5,700 part‑time)
• $10,000 Student Loan Repayment ($5,000 part‑time)
• $1,000 Professional Development per year ($500 part‑time)
• $250 Well‑Being Fund per year ($125 for part‑time)
• Matching 401(k)
• Excellent medical, dental and vision coverage
• Life insurance
• Annual Employee Salary Increase and Incentive Bonus
• Paid time off and Holiday pay

The Manager, IS Cyber Security leads the team driving governance, risk, and compliance across the enterprise. The role oversees third‑party risk management, ensures adherence to HIPAA, PCI, and NIST standards, and strengthens security operations through policy reviews, vendor assessments, and workforce training. Ideal candidates bring 5+ years of IT security leadership experience, vendor negotiation skills, and certifications such as CRISC, CISA, or CISM.

Key responsibilities include threat and vulnerability management, logging and monitoring, endpoint protection, incident response, medical device security, identity access management, privileged access management, application and cloud security, development and delivery of IS security standards, and oversight of budget and strategic decision input.

• Manage projects, processes, resources and support activities within Security.
• Manage vendor relationships, contracts and contract management policies for cost‑effectiveness, negotiate licensing agreements, plan major software/infrastructure upgrades, and ensure service management processes are used.
• Demonstrate ability to lead and manage change efficiently and effectively.
• Manage operating and capital budgets that meet NMHC budget goals.
• Develop and maintain strong working relationships to collaborate and partner with peers and key stakeholders.
• Provide twenty‑four‑hour support for technical issues and incident response.
• Represent NMHC at relevant international and national professional organizations and forums.
• Mentor and influence a team of security analysts and engineers, including career development of direct reports.

• Bachelor’s degree.
• 5 years’ experience in Information Security.
• 2 years’ experience in a lead or manager position.
• Demonstrated project management, process improvement and budgeting skills.
• Effective relationship building with peers and constituents at all levels.
• Strong analysis and problem‑solving skills.
• Experience negotiating with external vendors and vendor contracts.
• Excellent team‑building, verbal and written communication skills.
• Outstanding coordination, facilitation, consultation and conflict resolution skills.
• Management experience with complex, cross‑organizational systems.
• Knowledge of applicable laws, guidelines or regulations (HIPAA, NIST, GDPR, etc.).
• Familiarity with Identity Management and Network Security processes, technologies and best practices.

• Healthcare technology background.
• Information Security Certifications (CISSP, etc.).
• Master’s degree in a related field.

Northwestern Medicine is an equal opportunity employer and does not discriminate in hiring or employment on the basis of age, sex, race, color, religion, national origin, gender identity, veteran status, disability, sexual orientation or any other protected status.

Northwestern Medicine conducts a background check that includes criminal history on newly hired team members. Results are evaluated on a case‑by‑case basis and all local, state and federal laws are followed, including the Illinois Health Care Worker Background Check Act.

Internal employees and rehires who left within the last year are not eligible for the sign‑on bonus. Exception:
New graduate internal employees seeking their first licensed clinical position may be eligible depending on the job family.

• Not Applicable

• Full‑time

• Other, Information Technology, and Management

• Wellness and Fitness Services
• Hospitals and Health Care