Cybersecurity Manager

Governance, Risk & Compliance (GRC):

• Lead the enterprise security program aligned to HIPAA Security Rule, SOC 2 Type II, HITRUST CSF, and internal policies.
• Own risk assessments, risk register, treatment plans, and executive reporting.
• Maintain security policies and standards.

Security Operations:

• Oversee daily security operations: SIEM monitoring, EDR, vulnerability scanning, patch management, and email security/anti-phishing.
• Implement and tune detection rules, playbooks, and escalation paths; manage MDR/SOC vendors as applicable.
• Ensure Azure security posture through Defender for Cloud, Sentinel, and RBAC enforcement.

Incident Response & Business Continuity:

• Lead incident response lifecycle with documented runbooks.
• Coordinate with Privacy/Legal on reportable events; align to HIPAA breach requirements and internal incident procedures.
• Maintain and test Business Continuity and Disaster Recovery plans; run tabletop exercises at least twice annually.