IT Manager - Cyber Security | Onsite: Hagerstown, Maryland

About the role

At Meritus Health, protecting patient data and system integrity is a mission-critical priority. As IT Manager – Cybersecurity, you’ll lead the design, implementation, and oversight of enterprise-wide security solutions. This hands-on leadership role requires deep technical expertise and a proactive approach to risk management, incident response, and regulatory compliance. You’ll collaborate across IT teams and with third-party partners to assess vulnerabilities, drive remediation, and strengthen defenses.

Responsibilities

• Design and implement cybersecurity solutions, standards, and procedures across the Meritus enterprise
• Lead incident response and remediation efforts for systems, applications, and infrastructure vulnerabilities
• Collaborate with managed services providers to review and execute corrective action plans
• Coordinate internal audits and risk assessments in support of HIPAA, PCI, and Meaningful Use compliance
• Conduct phishing simulations, review risk exceptions, and support Business Integrity and Compliance initiatives
• Develop and maintain security policies, procedures, and documentation aligned with NIST and industry standards
• Perform periodic reviews of infrastructure and system configurations to ensure compliance and integrity
• Provide audit reports and support investigations as needed
• Guide secure configuration of servers, firewalls, VPNs, IPS, routers, and switches
• Analyze scan results, resolve vulnerabilities, and document exceptions or false positives
• Manage eradication and recovery steps as part of incident response protocols
• Partner with IT operations, applications, and network/server teams to coordinate security efforts
• Mentor and develop junior security engineers, fostering a culture of collaboration and continuous learning

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Business, or related field required
• Minimum of 7 years of progressive experience in cybersecurity, network, or server-related roles
• Proven experience creating and maintaining NIST documentation (e.g., SSPs, risk assessments, configuration management)
• 3 years of leadership experience preferred, with a strong desire to coach and develop team members
• Working knowledge of SIEM/VTM technologies, cloud security, application security, network security, and disaster recovery
• Experience analyzing scan results and collaborating with stakeholders to resolve vulnerabilities

Qualifications

• Preferred certifications include: CompTIA Security+, CEH, CISSP, SANS GIAC, CCNA, Certified Ethical Hacker
• Additional certifications in security platforms or tools are a plus

Skills

• Deep understanding of information security frameworks and regulatory obligations (HIPAA, PCI DSS, HITRUST, NIST)
• Familiarity with tools such as HIPAA One, KnowBe4, Nessus, AlienVault, Cyberreason, Symantec ATP, Cisco ASA, Duo, Big Fix
• Strong analytical, problem-solving, and communication skills
• Ability to manage complex technical environments and lead cross-functional initiatives
• Commitment to confidentiality, integrity, and continuous improvement

Benefits

• Health, Dental, and Vision Insurance (Coverage begins on the first of the month following your hire date)
• Life Insurance & Disability Coverage (Includes company-paid life insurance, as well as short- and long-term disability benefits)
• Paid Time Off (PTO) – A generous PTO program designed to help you recharge and maintain a healthy work-life balance
• 401(k) Retirement Plan – Robust company match to support your long-term financial goals
• Education Assistance & Tuition Reimbursement – Support for your continued learning and career growth
• Flexible Spending Accounts (FSA) and Health Savings Accounts (HSA) – Options to save pre-tax dollars for eligible healthcare and dependent care expenses
• Shift Differential Pay – Team members working evening, night, or weekend shifts may be eligible for additional pay

This role is onsite in Hagerstown, Maryland. Compensation is based on experience.