Manager, Cybersecurity - Remote

Job Summary

This role will be responsible for managing security governance programs, SOX IT controls coordination, customer and vendor security reviews, client-facing security engagements, regulatory and compliance assessments, and cross-functional security initiatives.

The ideal candidate will act as the single point of contact (SPOC) for security governance matters across Conifer, ensuring alignment with enterprise security requirements, client obligations, regulatory standards, and business objectives. This leader will work closely with Conifer executives, operational leaders, compliance teams, technology teams, customers, vendors, auditors, and Tenet Enterprise Security to drive a unified security and risk management program.

• Lead Conifer's security governance activities, ensuring adherence to corporate security policies, regulatory requirements, and industry best practices.
• Coordinate and manage SOX IT General Controls (ITGC) activities, control testing, remediation efforts, evidence collection, and audit support.
• Support internal and external audits, including SOX, SOC, client audits, and regulatory assessments.
• Track compliance initiatives and monitor remediation activities through completion.
• Facilitate governance forums and provide regular updates to executive leadership.

• Serve as the primary security representative for client security inquiries, assessments, and due diligence activities.
• Lead customer security reviews, questionnaires, RFP/RFI responses, and security presentations.
• Build trusted relationships with client security, compliance, legal, and technology stakeholders.
• Partner with Sales, Client Services, and Operations teams to address customer security requirements during contract negotiations and ongoing service delivery.

• Manage Conifer's third-party security risk management processes.
• Conduct security reviews and risk assessments for vendors, partners, and service providers.
• Coordinate remediation plans with vendors and internal stakeholders.
• Ensure compliance with vendor security requirements, contractual obligations, and client expectations.
• Maintain vendor security risk documentation and reporting.

• Serve as Conifer's primary liaison to Tenet Enterprise Security, Risk, and Compliance organizations.
• Coordinate the adoption and implementation of enterprise security initiatives across Conifer.
• Ensure alignment between Conifer-specific requirements and Tenet cybersecurity standards.
• Represent Conifer in enterprise security governance, risk management, and strategic planning activities.

• Identify, assess, and monitor information security, operational, and third-party risks.
• Support enterprise risk management activities, risk reporting, and mitigation planning.
• Track security findings and corrective actions through closure.
• Assist in the development and maintenance of security policies, standards, and procedures.

• Develop executive-level reporting, dashboards, and risk metrics.
• Present security program status, compliance updates, and risk assessments to senior leadership.
• Drive cross-functional collaboration among Security, Compliance, Legal, Operations, Technology, and Client Services teams.

• Bachelor's degree in Information Security, Computer Science, Information Technology, Business Administration, or related field/experience.
• 7+ years of experience in Information Security, Risk Management, Compliance, Audit, or Governance.
• 3+ years of leadership or program management experience.
• Strong knowledge of:
• SOX IT Controls (ITGC)
• Security Governance & Compliance
• Vendor Risk Management
• Client Security Reviews and Due Diligence
• Risk Assessment Methodologies
• SOC, NIST, ISO 27001, HIPAA, and healthcare security requirements
• Experience working directly with customers, auditors, and executive stakeholders.
• Exceptional communication and presentation skills.

• Industry certifications such as:
• CISSP
• CISM
• CRISC
• CISA
• Security+
• Experience…