Cyber Security Manager

About the Company The Cybersecurity Manager leads the organization’s enterprise information security program, ensuring the confidentiality, integrity, and availability of critical information assets. This role is responsible for defining and executing cybersecurity strategy, governance, risk management, and compliance initiatives aligned with regulatory requirements and organizational objectives. Partnering closely with IT leadership, the Cybersecurity Manager drives the development and maturity of security frameworks, policies, and incident response capabilities while embedding security into all technology operations and business processes. This role serves as the primary authority on cybersecurity risk and controls, providing oversight, guidance, and approval for security decisions across systems, networks, and cloud environments. About the Role Receives general supervision from the IT Director and other members of the IT Department. The Position and Job Summary (These are examples of the types of duties that may be performed. Additional duties may be added, and some tasks will be completed as needed.) Responsibilities Cybersecurity Strategy & Program LeadershipLead and evolve the enterprise cybersecurity program aligned with business goals and risk toleranceDevelop and manage a multi-year cybersecurity roadmap with measurable outcomesReport cybersecurity posture, risks, and maturity to executive leadershipEstablish KPIs/KRIs to track program effectiveness Governance, Risk & Compliance (GRC)Own and maintain the Information Security Management System (ISMS) aligned with ISO 27001Lead ISO 27001 certification readiness, audits, and continuous improvementOversee HITRUST and HIPAA compliance, ensuring audit readiness and control effectivenessConduct enterprise risk assessments and manage remediation lifecycleDevelop and enforce security policies, standards, and procedures Security Architecture & Microsoft Security EcosystemDrive improvements in Microsoft Secure Score and security postureOversee security across:Identity (Entra ID / Azure AD)Endpoint (Defender)Email & Collaboration (M365 Security)Cloud Security (Azure Security)Govern Microsoft Purview for data protection, DLP, and compliance Security Operations & Incident ManagementProvide oversight for:Vulnerability managementThreat detection and monitoringIncident response and escalationLead incident investigations and root cause analysis (RCA)Ensure security is integrated into:System designChange managementInfrastructure standards Vendor Risk & Audit ManagementManage third-party cybersecurity risk assessmentsLead external audits, penetration testing, and compliance reviewsAct as the primary liaison for auditors, regulators, and stakeholdersCoordinate remediation across business and IT teams Leadership & Organizational EnablementLead, mentor, and develop cybersecurity team membersDrive security awareness and training programs across the organizationSupport budgeting, vendor selection, and strategic investmentsFoster a culture of security accountability QualificationsEducation & ExperienceBachelor’s degree in IT, Computer Science, or related field7+ years in cybersecurity, risk, or information security (healthcare preferred)4+ years of leadership experience managing teams and programs5+ years of hands-on HIPAA compliance experienceA valid California Driver's License and transportation, or acceptable substitute, may be required based on assigned duties. Required SkillsExecutive-level communication and stakeholder engagementStrategic thinking and risk-based decision makingDeep understanding of regulatory environments (HIPAA, HITRUST, ISO)Strong leadership and cross-functional collaborationAbility to translate technical risk into business impact Preferred SkillsCISSP, CISM, CRISC, HCISPPMicrosoft Azure / Security certifications Pay range and compensation package $133,000.14 - $168,000.00 Equal Opportunity StatementWe are committed to diversity and inclusivity in our hiring practices.