Manager, Healthcare Cybersecurity Operations (C2H)

Position Overview

The Manager of Healthcare Cybersecurity Operations serves as the primary relationship manager between the organization and its Managed Security Service Provider (MSSP), ensuring security operations are aligned with business objectives, regulatory requirements, and industry best practices. This leader will oversee day-to-day security operations while driving strategic initiatives that improve detection capabilities, incident response, threat intelligence, security tooling, operational metrics, and vendor performance.

Key Responsibilities

• Serve as the primary operational liaison with MSSP vendor and manage the overall partnership.
• Oversee daily security operations, including alert management, ticket quality, incident response coordination, and operational effectiveness.
• Establish, monitor, and continually improve service level agreements (SLAs), key performance indicators (KPIs), and operational performance metrics.
• Lead weekly operational meetings, monthly performance reviews, and quarterly strategic business reviews with the MSSP.
• Cook up enterprise cybersecurity incident response activities between internal teams and the MSSP.
• Develop and continuously improve incident response playbooks and operational procedures.
• Lead threat hunting initiatives leveraging MITRE ATT&CK methodologies and emerging threat intelligence.
• Ensure effective integration of security technologies, including SIEM, SOAR, EDR, vulnerability management, and ticketing platforms.
• Drive continuous tuning and optimization of security monitoring to improve detection accuracy while reducing false positives.
• Partner with infrastructure, networking, cloud, compliance, and application teams to strengthen the organization's security posture.
• Develop executive dashboards and board-level reporting that communicate cyber risk, incident trends, and operational performance.
• Translate complex cybersecurity risks into business-focused recommendations for executive leadership.
• Mentor, coach, and develop cybersecurity staff while fostering collaboration between internal resources and the MSSP.
• Support third-party risk management activities and ensure compliance with healthcare regulatory requirements and cybersecurity frameworks.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline (or equivalent experience).
• 10+ years of progressive cybersecurity or information security experience (14+ years without a degree).
• 5+ years of leadership experience managing cybersecurity operations or security teams.
• Demonstrated experience working with Managed Security Service Providers (MSSPs) or outsourced Security Operations Centers (SOCs).
• Strong technical knowledge of:
• SIEM
• SOAR
• Endpoint Detection & Response (EDR)
• Firewalls
• Vulnerability management platforms
• Deep understanding of incident response methodologies, cyber kill chain concepts, and the MITRE ATT&CK framework.
• Experience establishing operational metrics, vendor governance, and performance management.
• Excellent leadership, communication, analytical, and project management skills.

Preferred Qualifications

• Experience supporting large healthcare organizations.
• Knowledge of healthcare cybersecurity regulations, including HIPAA and HITECH.
• Experience with cloud security technologies across AWS, Azure, or Google Cloud Platform.
• Familiarity with scripting or automation technologies such as Python.
• Professional cybersecurity certifications such as CISSP, CISM, GIAC, Security+, CASP+, or other comparable credentials.