Information Security Manager

Beacon Behavioral Partners•St. George, LA

13h•Remote

About The Position

The Information Security Manager leads the organization's security operations and risk program. The role oversees security monitoring and incident response, manages the SOC and its vendors, reports on security posture to executive leadership, and ensures the organization meets its compliance and audit obligations. It combines hands-on operational oversight with governance and communication. The position is remote and full-time. It participates in an on-call rotation for security incidents, with occasional travel for audits, vendor meetings, or conferences if applicable.

Requirements

Bachelor's degree in Information Security, Computer Science, Information Technology, or equivalent experience.
6–10 years of experience in cybersecurity, security operations, or incident response, including at least 2 years in a lead or management role.
Proven experience responding to real-world security incidents and hands-on SOC operations experience.
Hands-on experience with SIEM platforms (e.g., Microsoft Sentinel, Splunk, LogRhythm), EDR/XDR solutions (e.g., Microsoft Defender, CrowdStrike), and email security, identity security, and endpoint tools.
Experience managing third-party security vendors and service providers.
Working knowledge of HIPAA, PHI protection, and healthcare security expectations, as well as other security frameworks and compliance requirements.
Experience supporting audits and managing remediation.
Strong written and verbal communication skills, including the ability to produce executive-level summaries.
Ability to work independently and exercise sound judgment during security events.

Nice To Haves

Experience working with a managed SOC or MDR provider.
Healthcare or other regulated-industry background (e.g., finance, government).
Microsoft 365 security experience (Defender, Entra ID, Purview, etc.).
Experience with vulnerability management platforms and cloud security (AWS, Azure, or GCP).
Relevant certifications, preferred but not required: CISSP, CISM, CISA, CRISC, GCIA, GCED, GCIH, Security+, SC-200, or similar.
Master's degree or MBA.

Responsibilities

Oversee 24/7 security monitoring and threat detection, and review, validate, and prioritize alerts from the managed SOC, SIEM, EDR/XDR, identity, email, and network security tools.
Act as the internal escalation point for security incidents, including phishing, malware, account compromise, data exposure, and policy violations.
Lead incident response from detection through containment, eradication, recovery, and post-incident review.
Coordinate remediation with IT Operations, Helpdesk, M365 and network teams, legal, HR, communications, and third-party vendors.
Maintain detailed incident documentation, timelines, and post-incident summaries.
Maintain and test incident response plans, runbooks, and tabletop exercises.
Manage the internal or outsourced SOC, including MSSP and MDR providers, and serve as the primary technical point of contact for the managed SOC/MDR provider.
Validate SOC findings, challenge false positives, and ensure alerts are actionable and risk-based.
Participate in tuning discussions to improve alert quality and reduce noise.
Define, monitor, and enforce vendor SLAs, ensuring incidents meet defined response expectations.
Evaluate and select security vendors and tools, and manage contracts, renewals, and budgets.
Conduct regular vendor reviews and escalate performance issues.
Produce recurring security reports for the VP of IT, executive leadership, and board members, including incident summaries, threat trends and metrics, and risk posture and exposure overview.
Translate technical security data into clear, non-technical business risk language to support decision-making and budget requests.
Provide ad-hoc briefings following significant incidents or emerging threats.
Run risk assessments and maintain the risk register and remediation tracking.
Ensure alignment with applicable frameworks and regulations, including providing operational evidence, incident data, and security metrics to support compliance efforts.
Develop and maintain security policies, standards, procedures, and runbooks.
Identify recurring issues, control gaps, and opportunities to improve detection, response, and remediation processes.
Partner with IT leadership to improve overall security maturity and drive the security roadmap.
Lead security awareness and training initiatives.
Serve as the primary contact for internal, external, and regulatory audits.
Coordinate evidence collection, control testing, and responses to audit findings.
Track remediation of audit findings through to closure.