Cybersecurity Manager

Envision Radiology•Colorado Springs, CO

13d•$143,480 - $179,350•Onsite

About The Position

The Cybersecurity Manager is responsible for leading Envision Radiology's enterprise cybersecurity program by integrating cybersecurity operations, governance, risk management, and regulatory compliance into a unified security strategy. This position leads the cybersecurity team and partners with Information Technology, Compliance, Privacy, Legal, Human Resources, and business leaders to balance strategic planning with operational oversight of security governance, incident response, and security assessments in alignment with HIPAA, HITRUST, the NIST Cybersecurity Framework, and PCI DSS.

Requirements

Seven (7) or more years of progressively responsible experience in cybersecurity, information security, or technology risk management.
Three (3) or more years of leadership experience managing cybersecurity personnel, security programs, or enterprise security initiatives.
Experience leading both cybersecurity operations and governance, risk, and compliance (GRC) functions.
Experience with enterprise cybersecurity technologies, including endpoint protection, EDR, vulnerability management, identity security, cloud security, email security, and security monitoring platforms.
Experience leading security audits, regulatory assessments, customer security reviews, and technology risk assessments.
Experience developing information security policies, standards, governance processes, and security awareness programs.
Experience managing third-party security assessments, vendor risk, and technology risk.
Strong understanding of Microsoft enterprise technologies, cloud platforms, identity services, and modern cybersecurity architectures.
Excellent written, verbal, interpersonal, and presentation skills with the ability to communicate effectively with both technical and non-technical audiences.
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field, or an equivalent combination of education and experience.

Nice To Haves

Experience supporting healthcare or another highly regulated industry preferred.
One or more of the following certifications preferred: CISSP, CISM, CRISC, HCISPP, Security+, Microsoft Azure Security Engineer Associate (AZ-500) or equivalent cloud security certification, HITRUST Certified CCSFP.

Responsibilities

Leads and continuously matures Envision Radiology's enterprise cybersecurity program by developing strategy, establishing priorities, managing cybersecurity personnel, and overseeing the organization's overall security posture in alignment with business objectives and regulatory requirements.
Directs cybersecurity operations by overseeing security technologies, including endpoint protection, endpoint detection and response (EDR), identity security, vulnerability management, email security, cloud security, and security monitoring, while ensuring effective detection, prevention, response, and recovery from cybersecurity threats and incidents.
Develops, maintains, and enforces information security policies, standards, procedures, governance processes, and the organization's cybersecurity training and security awareness program to promote a culture of security and ensure alignment with HIPAA, HITRUST, the NIST Cybersecurity Framework, PCI DSS, and other applicable regulatory and industry frameworks.
Drives enterprise cyber risk management activities by partnering with Compliance and business stakeholders to identify, assess, prioritize, document, and mitigate technology risks, and oversees security assessments, audits, regulatory reviews, customer security questionnaires, and compliance initiatives.
Provides governance and oversight for Identity and Access Management (IAM), privileged access, authentication standards, access reviews, and security architecture while partnering with IT Operations and Infrastructure teams to integrate security controls throughout the technology environment.
Oversees cybersecurity incident response, vulnerability remediation, third-party security assessments, vendor risk management, and security due diligence activities for strategic initiatives, acquisitions, and business partnerships.
Evaluates, recommends, implements, and optimizes cybersecurity technologies, controls, and strategic initiatives that strengthen Envision Radiology's security posture while balancing operational effectiveness, regulatory compliance, and business enablement.
Prepares and presents cybersecurity metrics, risk assessments, program maturity updates, and strategic recommendations to executive leadership while serving as the organization's trusted advisor on cybersecurity governance, risk, and compliance matters.
Performs other duties as assigned. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.