Cyber Security Manager

West Tennessee Healthcare•Jackson, MS

About The Position

The Cybersecurity Manager designs, implements, and maintains security programs that protect electronic protected health information (ePHI), critical healthcare systems, and other sensitive systems and data. The role works with senior leadership, IT teams, and clinical and administrative departments to maintain compliance with regulations and frameworks such as HIPAA, NIST, and PCI, and to protect information from cyber threats. The manager develops and enforces security policies, leads internal and third-party security assessments and audits, evaluates employees, and develops the cybersecurity team. The position also represents the department in the Director’s absence.

Requirements

Six to eight years of work experience with knowledge of networks, system administration, and cybersecurity.
Three to five years of experience in a cybersecurity leadership position.
Current or previously obtained industry-standard certification such as CISSP, CISM, CISA, or CRISC.
Experience developing and managing capital and operational budgets and managing and supporting multiple contracts and projects.
Experience using project management tools and presenting information clearly to end users, team members, management, and vendors.
Broad understanding of securing healthcare technology solutions.
Ability to read, see, and hear to collect, comprehend, interpret, and retain information applicable to work procedures.
Ability to perform complex and varied tasks independently, apply knowledge in varied situations, and exercise independent judgment.
Ability to interpret, adapt, and apply guidelines, criteria, and procedures.
Ability to perform complex mathematical and technological processes.
Ability to write, spell, understand and apply grammar and punctuation rules, and edit and supervise one’s own work.

Nice To Haves

Bachelor’s degree in Information Technology, Computer Science, or a related discipline, or equivalent experience.
PMP, ITIL, or other industry-related certifications.

Responsibilities

Oversee security risk assessments, vulnerability scans, and penetration testing, and ensure mitigation measures are addressed.
Maintain the organization’s risk management framework and prioritize resources and projects based on risk impact.
Establish and lead incident response protocols to detect, contain, and remediate cybersecurity incidents.
Monitor threat intelligence and emerging security threats.
Evaluate and deploy security technologies, including SIEM, EDR, firewalls, and NAC.
Oversee system upgrades, network changes, and software deployments to maintain a secure environment.
Manage and mentor cybersecurity analysts and engineers, supporting professional development and continuous improvement.
Promote collaboration and knowledge sharing within the security team and across IT departments.
Develop and deliver security training and awareness programs for employees.
Work with clinical and administrative stakeholders to understand operational needs while maintaining secure infrastructure.
Communicate cybersecurity risks, mitigation strategies, and operational impacts to nontechnical stakeholders.
Design security models and review and approve security configurations and installation of firewalls, VPNs, routers, and intrusion detection and prevention systems.
Organize and lead IT security audits and assessments required by HIPAA, PCI, and other selected frameworks.
Monitor security industry updates, technologies, and best practices to improve security management.
Plan and schedule project tasks and dependencies to meet timelines and target dates, using project management tools.
Serve as a resource for the Cybersecurity team and represent the department in the Director’s absence.
Develop and implement security applications using project management practices.
Complete project phases, including analysis, design of tables and files, report formats and matrices, testing, user training, documentation, implementation, and follow-up.
Deliver formal presentations at all organizational levels.
Support departmental and strategic goals set by management.
Conduct employee evaluations and assess employee skill levels and expertise.
Monitor vendor service levels, coordinate service issues with equipment vendors, and document vendor maintenance performance.
Coordinate and communicate closely with vendors.
Facilitate interdepartmental and intradepartmental relationships.