Manager, Cybersecurity

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee security governance programs, coordination of SOX IT controls, customer and vendor security evaluations, client-facing security interactions, regulatory and compliance assessments, and cross-functional security projects.

• Serve as the single point of contact (SPOC) for security governance issues throughout Conifer, ensuring alignment with enterprise security requirements, client obligations, regulatory standards, and business goals.

• Direct Conifer’s security governance initiatives, ensuring compliance with corporate security policies, regulatory mandates, and industry best practices.

• Organize and manage SOX IT General Controls (ITGC) activities, including control testing, remediation efforts, evidence collection, and audit assistance.

• Support both internal and external audits, which include SOX, SOC, client audits, and regulatory assessments.

• Monitor compliance initiatives and track remediation activities until completion.

• Facilitate governance forums and provide regular updates to executive leadership.

• Act as the primary security contact for client security inquiries, assessments, and due diligence activities.

• Lead customer security assessments, questionnaires, RFP/RFI submissions, and security presentations.

• Establish trusted relationships with client security, compliance, legal, and technology stakeholders.

• Collaborate with Sales, Client Services, and Operations teams to meet customer security requirements during contract negotiations and throughout service delivery.

• Oversee Conifer’s third-party security risk management processes.

• Conduct security assessments and risk evaluations for vendors, partners, and service providers.

• Coordinate remediation strategies with vendors and internal stakeholders.

• Ensure compliance with vendor security requirements, contractual obligations, and client expectations.

• Maintain documentation and reporting for vendor security risks.

• Act as Conifer’s primary liaison to Tenet Enterprise Security, Risk, and Compliance organizations.

• Facilitate the adoption and implementation of enterprise security initiatives across Conifer.

• Ensure consistency between Conifer-specific requirements and Tenet cybersecurity standards.

• Identify, evaluate, and monitor information security, operational, and third-party risks.

• Assist with enterprise risk management activities, risk reporting, and mitigation planning.

• Track security findings and ensure corrective actions are resolved.

• Contribute to the creation and upkeep of security policies, standards, and procedures.

• Generate executive-level reports, dashboards, and risk metrics.

• Present updates on security program status, compliance, and risk assessments to senior leadership.

• Promote cross-functional collaboration among Security, Compliance, Legal, Operations, Technology, and Client Services teams.

⛳️ Requirements

• Bachelor’s degree in Information Security, Computer Science, Information Technology, Business Administration, or a related field/experience.

• A minimum of 7 years of experience in Information Security, Risk Management, Compliance, Audit, or Governance.

• At least 3 years of experience in leadership or program management.

• Strong understanding of:

• • SOX IT Controls (ITGC)
• • Security Governance & Compliance
• • Vendor Risk Management
• • Client Security Reviews and Due Diligence
• • Risk Assessment Methodologies
• • SOC, NIST, ISO 27001, HIPAA, and healthcare security requirements

• Experience collaborating directly with customers, auditors, and executive stakeholders.

• Outstanding communication and presentation abilities.

🏝️ Benefits

• Medical, dental, vision, disability, AD&D, and life insurance

• Manager Time Off – 20 days per year

• Discretionary 401k match

• 10 paid holidays annually

• Health savings accounts, healthcare & dependent flexible spending accounts

• Employee Assistance program, Employee discount program

• Voluntary benefits, including pet insurance, legal insurance, accident and critical illness insurance, long-term care, elder & childcare, and auto & home insurance

• For employees in Colorado, paid leave is available in accordance with Colorado’s Healthy Families and Workplaces Act.