Senior Healthcare Cybersecurity & Operations Manager

At ConvenientMD, we’re on a mission to make good health more convenient for all – working to improve how patients and providers experience healthcare in New England. To support this belief, we’re building a team of dedicated professionals who genuinely care about improving lives, are passionate about work that can make a difference, and are driven to learn from one another.

Note:

This is a hybrid role connected to our Portsmouth, New Hampshire headquarters. While there will be meetings and business needs that require onsite presence at ConvenientMD headquarters, we offer flexibility in the weekly schedule. A typical schedule may average up to two days onsite per week, though the specific cadence will be discussed during the initial phone screen and may remain flexible in partnership with the hiring manager, our Chief Information Officer (CIO).

ConvenientMD is seeking a Senior Healthcare Cybersecurity & Operations Manager to serve as a hands‑on cybersecurity subject matter expert and trusted technical partner within our growing healthcare organization. This role is ideal for someone who can move fluidly between execution and influence – strengthening systems, assessing risk, supporting IT operations, and helping senior leadership understand how cybersecurity decisions impact the business, our teams, and patient care.

This position is designed for someone who can operate in the details while also bringing the judgment, communication, and subject matter expertise needed to support broader technology decisions. The right person will be comfortable assessing risk, improving processes, responding to security needs, supporting infrastructure, and translating complex technical considerations into clear, business‑relevant recommendations.

This is not a traditional management role or a governance‑only position. We are looking for a senior individual contributor who can serve as a trusted cybersecurity SME, operational problem‑solver, and cross‑functional partner. Governance, compliance, and documentation are important parts of the work, but the core need is cybersecurity expertise paired with practical IT operations experience in a healthcare or similarly regulated environment.

• Serve as a key cybersecurity subject matter expert across ConvenientMD’s healthcare technology environment.
• Support the development, implementation, and ongoing improvement of cybersecurity strategies, policies, procedures, and controls to protect organizational data, clinical systems, and sensitive patient information.
• Monitor, assess, and respond to cybersecurity risks, vulnerabilities, incidents, and emerging threats, coordinating remediation efforts with internal teams and external partners as needed.
• Apply healthcare‑specific security and regulatory knowledge, including HIPAA, privacy, compliance, and risk management considerations, to support secure technology decisions.
• Help champion a culture of cybersecurity awareness and best practices across clinical, corporate, and technical teams.

• Support secure and reliable IT operations across infrastructure, networking, platforms, hardware, devices, applications, and end‑user environments.
• Partner with IT teams to identify operational gaps, strengthen systems, troubleshoot complex issues, and improve the overall stability and security of the technology environment.
• Evaluate tools, workflows, access controls, support trends, infrastructure needs, and healthcare technology requirements, including HIPAA, HITRUST, privacy, compliance, clinical operations, patient data protection, and regulated systems, to recommend practical improvements.
• Develop and maintain a penetration testing schedule, partnering with internal teams and external vendors as needed to support timely remediation of identified vulnerabilities.
• Plan and execute an annual tabletop disaster recovery/business continuity exercise to test readiness, identify gaps, and strengthen organizational response planning.
• Assist with technology initiatives that require both cybersecurity insight and operational execution.