IT Manager - Cyber Security | Onsite: Hagerstown, Maryland

Meritus Health•Hagerstown, MD

23h•$130,894 - $209,394•Onsite

About The Position

At Meritus Health, protecting patient data and system integrity is a mission-critical priority. As IT Manager – Cybersecurity, you’ll lead the design, implementation, and oversight of enterprise-wide security solutions. This hands-on leadership role requires deep technical expertise and a proactive approach to risk management, incident response, and regulatory compliance. You’ll collaborate across IT teams and with third-party partners to assess vulnerabilities, drive remediation, and strengthen defenses. From guiding security audits to mentoring junior engineers, you’ll help build a resilient infrastructure that safeguards patient care and operational continuity.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Business, or related field required
Equivalent relevant experience in application security analysis, systems analysis, or testing may be considered
Minimum of 7 years of progressive experience in cybersecurity, network, or server-related roles
Proven experience creating and maintaining NIST documentation (e.g., SSPs, risk assessments, configuration management)
3 years of leadership experience preferred, with a strong desire to coach and develop team members
Working knowledge of SIEM/VTM technologies, cloud security, application security, network security, and disaster recovery
Experience analyzing scan results and collaborating with stakeholders to resolve vulnerabilities
Deep understanding of information security frameworks and regulatory obligations (HIPAA, PCI DSS, HITRUST, NIST)
Familiarity with tools such as HIPAA One, KnowBe4, Nessus, AlienVault, Cyberreason, Symantec ATP, Cisco ASA, Duo, Big Fix
Strong analytical, problem-solving, and communication skills
Ability to manage complex technical environments and lead cross-functional initiatives
Commitment to confidentiality, integrity, and continuous improvement

Nice To Haves

Preferred certifications include: CompTIA Security+, CEH, CISSP, SANS GIAC, CCNA, Certified Ethical Hacker
Additional certifications in security platforms or tools are a plus

Responsibilities

Design and implement cybersecurity solutions, standards, and procedures across the Meritus enterprise
Lead incident response and remediation efforts for systems, applications, and infrastructure vulnerabilities
Collaborate with managed services providers to review and execute corrective action plans
Coordinate internal audits and risk assessments in support of HIPAA, PCI, and Meaningful Use compliance
Conduct phishing simulations, review risk exceptions, and support Business Integrity and Compliance initiatives
Develop and maintain security policies, procedures, and documentation aligned with NIST and industry standards
Perform periodic reviews of infrastructure and system configurations to ensure compliance and integrity
Provide audit reports and support investigations as needed
Guide secure configuration of servers, firewalls, VPNs, IPS, routers, and switches
Analyze scan results, resolve vulnerabilities, and document exceptions or false positives
Manage eradication and recovery steps as part of incident response protocols
Partner with IT operations, applications, and network/server teams to coordinate security efforts
Mentor and develop junior security engineers, fostering a culture of collaboration and continuous learning