Cybersecurity Program Manager | PAM Health Corporate

PAM Health•Plano, TX

16h•Remote

About The Position

The Cybersecurity Program Manager leads enterprise cybersecurity programs and security technology initiatives to protect PAM Health, enable business operations, and support patient care. The role coordinates with Information Technology, Infrastructure, Support, Clinical Informatics, Compliance, Privacy, Legal, managed service providers, application teams, and other business partners to deliver security solutions while managing operational risk. The position oversees security vendor relationships and performance, cybersecurity awareness, incident response program maturity, security metrics, executive reporting, and cross-functional delivery. It evaluates security solutions, develops implementation plans and risk controls, escalates significant risks, and recommends changes to the security technology portfolio. The role also supports broader technology and organizational planning and provides cybersecurity leadership when significant issues require coordinated action. The role promotes inclusive leadership, collaboration, sound resource management, effective communication, quality improvement, customer service, confidentiality, and adherence to health and safety policies. It is a remote position with travel of up to 15 percent to enterprise facilities. Facility visits take place in operating clinical environments and may require compliance with facility access, screening, and health requirements. Work is generally indoors, with potential exposure to hospital clinical surroundings during visits. The position may coordinate responses to significant security incidents outside standard business hours. This exempt position is supervised by the Chief Information Security Officer.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Business Administration, Project Management, or a related field, or an equivalent combination of education and experience.
Ten years of progressive information technology experience, including at least five years in cybersecurity.
Three years leading cybersecurity programs, enterprise technology initiatives, or comparable cross-functional projects.
Experience managing security vendors, service providers, contracts, service-level agreements, performance metrics, and remediation commitments.
Experience coordinating enterprise security technology deployments across infrastructure, endpoint, network, application, and business teams.
Experience creating security awareness communications, program metrics, and executive-level reports.
Strong program and project management skills, including planning, prioritization, dependency management, risk tracking, and delivery oversight.
Ability to evaluate cybersecurity technologies and services for effectiveness, operational impact, business fit, and risk.
Knowledge of security operations, incident response, security awareness, vendor management, enterprise infrastructure, and common cybersecurity controls.
Ability to translate technical and security risk into clear business impact, recommendations, and decisions for executive and non-technical audiences.
Strong written and verbal communication, negotiation, relationship management, and cross-functional leadership skills.
Sound judgment, accountability, initiative, and ability to lead through influence while balancing security requirements with operational needs.

Nice To Haves

Master's degree in Cybersecurity, Information Technology, Business Administration, or a related field.
Project Management Professional (PMP), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or comparable cybersecurity, program management, or vendor management certification.
Cybersecurity experience in healthcare, a health system, or another regulated environment.
Experience building or maturing cybersecurity awareness, incident response, governance, metrics, or vendor management programs.
Experience supporting a geographically distributed, multi-facility organization.
Prior infrastructure, networking, support, systems, or application experience that supports practical evaluation of operational impact.

Responsibilities

Lead the planning, implementation, and continuous improvement of enterprise cybersecurity programs and security technology initiatives.
Coordinate security deployments with Infrastructure, Support, managed service providers, application teams, and business stakeholders while minimizing unnecessary operational disruption.
Evaluate security solutions for suitability, effectiveness, risk, operational impact, and alignment with PAM Health requirements.
Develop phased implementation plans, milestones, dependencies, risk controls, communications, and success measures for cybersecurity initiatives.
Identify significant security and operational risks, recommend controls, and escalate decisions requiring executive direction.
Manage security vendor relationships, service delivery, performance reviews, remediation commitments, and accountability.
Monitor contracts, service-level agreements, performance metrics, outages, corrective actions, and value delivered by security providers.
Coordinate vendor incident response, root-cause analysis, post-incident reviews, remediation plans, and contractual follow-up.
Lead and expand the cybersecurity awareness program, including employee education, phishing awareness, and recurring communications.
Develop security metrics, dashboards, status reports, risk summaries, and executive-level communications.
Formalize and improve cybersecurity program processes, including incident response, governance, documentation, and cross-functional coordination.
Build relationships between Cybersecurity and technical, clinical, and business teams and translate business needs into secure, practical solutions.
Maintain a forward-looking view of the security technology portfolio and recommend when solutions should be enhanced, replaced, consolidated, or retired.
Support broader technology and organizational planning and provide cybersecurity leadership when significant issues require coordinated action.
Coach, evaluate, develop, and inspire staff; set expectations and recognize achievements.
Promote cooperation, fairness, equity, empathy, and inclusion; seek to understand others' perspectives.
Manage company resources with accountability and sound judgment, observe confidentiality and company values, and support policies, procedures, and safety guidelines.
Identify problems, involve others in finding solutions, analyze alternatives, and implement effective responses promptly.
Make clear, timely, consistent, and ethical decisions based on relevant information.
Align priorities with the company vision, measure outcomes, use feedback to adjust, and organize complex issues toward resolution.
Communicate effectively with peers, employees, and customers; listen actively and negotiate effectively.
Promote efficient, effective, high-quality performance and take initiative to improve results.
Motivate others, accept responsibility, maintain morale, develop trust and credibility, and expect ethical behavior.
Encourage cooperation and collaboration, build effective teams, and respond flexibly to others' needs.
Maintain up-to-date skills through professional organizations and/or continuing education.
Provide courteous, compassionate, and positive customer service; promote PAM Health's mission and vision.
Respect dignity and confidentiality and adhere to applicable policies and procedures.
Work safely, wear appropriate clothing, participate in OSHA-required training, follow universal precautions as appropriate, comply with Employee Health requirements, report unsafe practices, and understand the role in emergencies.