Cybersecurity Manager

Category:

Technical

City:

Jackson

State:

Tennessee

Shift:

7 - Day (United States of America)

Job Description Summary:

The Cybersecurity Manager is responsible for designing, implementing, and maintaining robust security programs that safeguard all electronic protected health information (ePHI), critical healthcare systems, and other systems. This role will work closely with senior leadership, IT teams, and various clinical and administrative departments to ensure compliance with industry regulations (e.g., HIPAA, NIST, PCI) and to protect patient data and other sensitive information from cyber threats. The ideal candidate will have a strong background in cybersecurity, proven experience in the healthcare environment, and the leadership skills to manage a team of cybersecurity professionals. The responsibilities include participating with various departments to develop, implement, and police security policies for the organization. This includes leading security assessments and audits both internally and with third party vendors. The manager conducts employee evaluations and is responsible for the development of the Cybersecurity Team to design, implement and support the security fundamentals for the organization.

ESSENTIAL JOB FUNCTIONS:

• Oversee regular security risk assessments, vulnerability scans, and penetration testing, ensuring that mitigation measures are promptly addressed.
• Maintain and evolve the organization’s risk management framework, prioritizing resources and projects based on risk impact.
• Establish and lead incident response protocols to swiftly detect, contain, and remediate cybersecurity incidents.
• Monitor threat intelligence sources and proactively address emerging cyber threats.
• Evaluate and deploy security technologies (e.g., SIEM, EDR, firewalls, NAC) that protect healthcare systems and networks.
• Oversee system upgrades, network changes, and software deployments to maintain a secure environment.
• Manage and mentor a team of cybersecurity analysts and engineers, providing guidance on professional development and continuous improvement.
• Foster a culture of collaboration and knowledge sharing within the security team and across IT departments.
• Develop and deliver ongoing security training programs for employees, emphasizing best practices and compliance obligations.
• Promote a security-focused culture across the organization, ensuring staff are equipped to identify and report suspicious activity.
• Work closely with clinical and administrative stakeholders to understand operational needs while maintaining a secure infrastructure.
• Communicate cybersecurity risks, mitigation strategies, and operational impacts clearly and effectively to non-technical stakeholders
• Designs security models, reviews and approves security configurations and installation of security devices (firewalls, VPN, routers, intrusion detection and prevention systems).
• Oversees security awareness programs, educate and communicate to the organization about security policies, procedures, and practices.
• Organize & lead organizational IT security audits and assessments required by HIPAA, PCI, and other selected frameworks. 
• Monitors industry security updates, technologies, and best practices to improve security management.
• Demonstrates expertise in project management to include the use of tools; plan and schedule tasks based on project timeline, establish tasks and appropriate dependence to set timeline and achieve desired target dates.
• Serves as a resource for the Cybersecurity team.
• Represents the department in the absence of the Director.
• Develops and implements security applications using project management.
• Completes phases of the project including analysis, design of tables and files, report formats and matrices, testing, user training, documentation, implementation, and follow up. 
• Ability to give formal presentations at all levels.
• Support department / strategic goals set by management.
• Performs employee evaluations. Evaluates employee skill levels to determine expertise.
• Monitors vendor service levels, coordinates service issues with equipment vendors, and documents vendor maintenance performance.
• Requires close coordination and communication with vendors.
• Facilitate inter / intra departmental relationships.

JOB SPECIFICATIONS:

EDUCATION:

• Prefer Bachelor’s Degree in Information Technology, Computer Science, or related discipline, or equivalent experience.

LICENSURE, REGISTRATION, CERTIFICATION:

• Requires industry standard certifications (current or previously obtained): CISSP, CISM, CISA, or CRISC.
• Preferred but not required certifications include: PMP, ITIL, or other industry-related certifications.

EXPERIENCE:

• Six to eight years work experience with knowledge of networks, system administration, and cybersecurity.
• Minimum three to five years of experience in a cybersecurity leadership position.
• Must be experienced in developing and managing capital and operational budgets, as well as the ability to manage and support multiple contracts and projects.
• Experienced in using Project Management tools and the ability to present the information in a precise and understandable manner to the end users, team members, management, and vendors alike.  
• Broad understanding of securing healthcare technology solutions.

KNOWLEDGE, SKILLS AND ABILITIES:

• The ability to read, see, and hear to collect, comprehend, interpret, and retain information that can be applied to work procedures.
• Performs highly complex and varied tasks requiring independent knowledge, its application to a variety of situations, as well as exercise of independent judgment.
• Must have the ability to interpret, adapt and apply guidelines, criteria and procedures.
• Must be able to perform complex mathematical and technological processes.
• Must be able to write, spell, understand and apply rules of grammar and punctuation, and to edit and supervise his/her own work.

NONDISCRIMINATION NOTICE STATEMENT

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, ethnicity, disability, religion, national origin, gender, gender identity, gender expression, marital status, sexual orientation, age, protected veteran status, or any other characteristic protected by law.