Cybersecurity Manager

Confluence Health•Wenatchee, WA

3d•Onsite

About The Position

The Cybersecurity Manager provides people leadership and operational management for the organization’s cybersecurity operations, identity/access, and network security engineering functions in a regulated healthcare environment. Reporting to the Information Security Officer, Director, this role converts security strategy, risk priorities, policies, and regulatory expectations into coordinated daily operations, measurable service outcomes, resilient technical practices, and staff development. The manager oversees workload, staffing, service delivery, incident coordination, technology operations, project execution, documentation, metrics, vendor performance, and cross-functional collaboration. The position serves as the primary management escalation point for assigned teams while preserving the Information Security Officer’s accountability for enterprise security governance, risk acceptance, regulatory oversight, executive reporting, and strategic direction.

Requirements

Bachelor’s Degree in Cybersecurity, Computer Science, Information Technology, or a related field, or an equivalent combination of education and relevant experience.
6 years of progressive experience in cybersecurity, information security, identity/access security, network security, or related enterprise technology disciplines and 2 or more years of formal leadership, supervision, or management experience within technical or security teams.
Two or more certifications such as CISSP, CISM, Security+, CCNP Security, GIAC, CRISC, or a role-aligned cloud, identity, network, or vendor certification.
Experience in healthcare or another highly regulated environment.
Experience with Microsoft security technologies, SIEM/SOAR, endpoint security, vulnerability/exposure management, firewalls, network access control, privileged access management, identity governance, cloud security, and secure remote access.

Responsibilities

Directly supervises assigned staff across cybersecurity, security operations/identity, and network security engineering. Establishes clear expectations, assigns work, reviews results, provides regular coaching and feedback, supports career development, manages performance, and promotes cross-training and succession readiness.
Translates priorities established by the Information Security Officer into team plans, service objectives, assignments, schedules, and measurable outcomes. Balances operational support, incidents, projects, maintenance, compliance activities, and technical debt using risk and business impact.
Oversees daily security monitoring, alert triage, investigation, containment, remediation, recovery coordination, vulnerability management, and operational use of security platforms. Ensures activity is timely, documented, repeatable, and escalated according to approved procedures.
Oversees operational identity and access workflows, including account lifecycle support, authentication controls, privileged access processes, access reviews, exception handling, and audit evidence. Partners with application, HR, Compliance, Privacy, and IT teams to improve access governance and reduce inappropriate access risk.
Oversees secure operation and lifecycle management of enterprise network and network security services, including WAN/LAN, wireless, firewalls, segmentation, secure remote access, network access control, load balancing, monitoring, and connectivity dependencies. Ensures resiliency, change discipline, documentation, and effective escalation during outages or security events.
Serves as the management escalation point for cybersecurity incidents, identity-related events, network disruptions, and high-impact operational issues. Coordinates technical resources, communications, evidence preservation, remediation, recovery, root-cause follow-up, and after-action improvements. Promptly escalates material risk and required decisions to the Information Security Officer.
Maintains effective intake, prioritization, escalation, and closure practices for incidents, requests, problems, and recurring work. Reviews queues, dashboards, documentation, service quality, aging items, and customer-impacting trends; addresses barriers and drives corrective actions.
Ensures assigned security and network platforms are maintained, monitored, documented, supported, and operated in accordance with approved architecture, change management, access, backup, recovery, and configuration standards. Coordinates lifecycle plans, capacity needs, upgrades, and operational readiness.
Leads or supports security and network initiatives, implementation planning, resource coordination, testing, operational acceptance, documentation, and transition to support. Ensures changes follow organizational change controls and that operational risks, dependencies, and rollback considerations are identified.
Develops and maintains meaningful team metrics, service dashboards, risk and remediation tracking, initiative status, trend analysis, and management summaries. Uses results to improve performance, resource planning, reliability, control effectiveness, and executive visibility through the Information Security Officer.
Implements and monitors operational practices supporting HIPAA Security Rule requirements, organizational policies, audit commitments, contractual security requirements, DNV-related expectations, and other applicable obligations. Coordinates evidence collection, remediation tracking, access/process reviews, and audit readiness without assuming the designated HIPAA Security Officer function.
Manages day-to-day vendor relationships, support performance, licensing, renewals, quotes, and assigned contracts. Assists the Information Security Officer with capital and operating budget development, forecasting, prioritization, and business justification.
Builds effective working relationships with IT, Clinical Applications, Privacy, Compliance, Legal, Human Resources, Project Management, business leaders, and vendors. Communicates operational risk, service impacts, priorities, and decisions in clear business and technical terms.
Ensures procedures, runbooks, standards, inventories, architecture references, escalation paths, and knowledge articles are current, usable, and consistently followed. Recommends policy and control improvements to the Information Security Officer.
Maintains current knowledge of cybersecurity threats, healthcare security requirements, identity and access practices, network security, and leadership methods. Participates in after-hours support or on-call escalation as assigned.
Performs other duties as assigned.
Demonstrate standards of behavior and adhere to the Code of Conduct in all aspects of job performance at all times.