Senior Manager, Information Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the daily implementation of the information security program at Vatica Health and Cozeva.

• Convert the security roadmap into key priorities, actionable delivery plans, team objectives, and measurable risk mitigation strategies.

• Assign tasks, track progress, escalate resource limitations, and address unresolved risks.

• Mentor team members, manage performance, and supervise security vendors, projects, and approved budgets.

• Direct the implementation of security controls across Azure, AWS, and on-premises environments.

• Collaborate on architecture assessments, secure design, threat modeling, and security verifications in software delivery pipelines.

• Rank vulnerabilities based on exposure and business implications, monitor remediation efforts, and confirm resolution.

• Manage cloud configuration oversight, identity and privileged access controls, endpoint and network protection, encryption, and data loss prevention strategies.

• Promote Zero Trust methodologies in collaboration with Infrastructure and Engineering teams.

• Supervise monitoring, threat detection, investigation, and response activities.

• Lead technical incident management, containment, and recovery efforts; maintain response plans and facilitate exercises and reviews of lessons learned.

• Aid in disaster recovery and business continuity testing initiatives.

• Maintain security policies, standards, risk assessments, and documentation of controls in conjunction with Compliance.

• Assist in fulfilling HIPAA obligations, HITRUST requirements, SOC 2 audits, and internal assessments.

• Monitor findings through remediation and report on control effectiveness, risk trends, and necessary leadership decisions.

• Evaluate security risks related to AI tools, external services, and third-party integrations.

• Establish safeguards against sensitive data exposure and unauthorized access.

• Collaborate with Engineering and Compliance on approved AI usage, access controls, monitoring, and innovative security technologies.

⛳️ Requirements

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related discipline, or equivalent practical experience.

• Over 10 years of progressive experience in cybersecurity, information security, or security engineering, with at least 2 years in a leadership role overseeing security teams or programs.

• Proven track record of translating security priorities into effective controls, resolving findings, and achieving measurable operational enhancements in a regulated setting.

• Practical experience with cloud and enterprise security, including Azure and AWS, identity and access management, endpoint protection, network security, encryption, and key management.

• Familiarity with security monitoring and SIEM tools, endpoint detection and response, web application firewalls, data loss prevention strategies, and vulnerability management systems.

• Experience in leading incident response efforts and coordinating remediation across technical teams.

• Understanding of secure software development, DevSecOps practices, and Zero Trust principles.

• Capability to assess business risks, prioritize tasks, convey recommendations to both technical and business stakeholders, and drive follow-through across teams.

• Preferred: Experience in safeguarding healthcare environments and protected health information (PHI), with knowledge of HIPAA, HITRUST, SOC 2, and the NIST Cybersecurity Framework.

• Preferred: Experience in securing cloud-native platforms, AI-enabled applications, and third-party AI integrations.

• Preferred: Relevant security certifications such as CISSP, CISM, CCSP, GIAC, or a cloud security certification.

🏝️ Benefits

• Competitive salary based on experience and skills.

• Bonus potential (contingent upon role and discretionary).

• 401k retirement plans.

• Opportunities for growth and career advancement.

• Comprehensive Medical, Dental, and Vision insurance options.

• Tax-free Dependent Care Account.

• Life insurance, short-term, and long-term disability coverage.

• Excellent paid time off (PTO) policy.

• Supportive work-life balance environment.

• Strong, collaborative teams.