Information Security Manager

This is a fully remote position, open to applicants in Louisiana.

📋 Description

• Direct the organization's security operations and risk management program.

• Supervise round-the-clock security monitoring and threat identification, reviewing, validating, and prioritizing alerts from managed SOC, SIEM, EDR/XDR, identity, email, and network security tools.

• Act as the internal escalation point for incidents involving phishing, malware, account compromise, data exposure, and policy violations.

• Lead incident response efforts including containment, eradication, recovery, and post-incident analysis.

• Coordinate remediation activities with IT Operations, Helpdesk, M365 and network teams, legal, HR, communications, and external vendors.

• Keep incident documentation, timelines, and post-incident summaries up to date.

• Maintain and test incident response plans, runbooks, and conduct tabletop exercises.

• Manage the internal or outsourced SOC, including MSSP and MDR providers.

• Serve as the primary technical liaison for the managed SOC/MDR provider.

• Validate findings from the SOC, challenge false positives, and enhance alert quality.

• Define, monitor, and uphold vendor SLAs.

• Assess and select security vendors and tools, managing contracts, renewals, and budgets.

• Generate regular security reports for the VP of IT, executive leadership, and board members.

• Convert technical security data into business-risk language and provide briefings following significant incidents or emerging threats.

• Conduct risk assessments and manage the risk register and remediation tracking.

• Ensure compliance with relevant frameworks and regulations, including HIPAA, NIST CSF, ISO 27001, SOC 2, and PCI DSS as applicable.

• Develop and maintain security policies, standards, procedures, and runbooks.

• Identify control deficiencies and enhance detection, response, and remediation processes.

• Collaborate with IT leadership to enhance security maturity and advance the security roadmap.

• Spearhead security awareness and training initiatives.

• Act as the primary point of contact for internal, external, and regulatory audits.

• Coordinate evidence gathering, control testing, and responses to audits.

• Monitor the remediation of audit findings until they are resolved.

⛳️ Requirements

• Bachelor's degree in Information Security, Computer Science, Information Technology, or equivalent experience.

• 6-10 years of experience in cybersecurity, security operations, or incident response, with at least 2 years in a leadership or management capacity.

• Demonstrated experience managing real-world security incidents and practical SOC operations experience.

• Practical experience with SIEM platforms (e.g., Microsoft Sentinel, Splunk, LogRhythm), EDR/XDR solutions (e.g., Microsoft Defender, CrowdStrike), and tools for email security, identity security, and endpoint protection.

• Experience in managing third-party security vendors and service providers.

• Familiarity with HIPAA, PHI protection, healthcare security standards, and other security frameworks and compliance obligations.

• Experience in supporting audits and overseeing remediation efforts.

• Excellent written and verbal communication skills, including the ability to create executive-level summaries.

• Capacity to work independently and exercise sound judgment during security incidents.

• Experience collaborating with managed SOC or MDR providers.

• Background in healthcare or other regulated industries (e.g., finance, government).

• Experience with Microsoft 365 security (Defender, Entra ID, Purview, etc.).

• Knowledge of vulnerability management platforms and cloud security (AWS, Azure, or GCP).

• Relevant certifications (preferred, not mandatory): CISSP, CISM, CISA, CRISC, GCIA, GCED, GCIH, Security+, SC-200 or similar.

• Master's degree or MBA (preferred).

🏝️ Benefits

• Participation in an on-call rotation for security incidents.

• Occasional travel for audits, vendor meetings, or conferences [if applicable].