IT Security Manager (FT) | MIS | Ames | 2026-094

McFarland Clinic•Ames, IA

19h•Hybrid

About The Position

The Information Security Manager is responsible for supporting and strengthening the organization’s information security program. This role helps protect patient, employee, and business information by managing security operations, identifying and reducing cyber risk, and ensuring compliance with regulatory requirements in a healthcare environment. The Information Security Manager works closely with IT teams, clinical leaders, and business partners to embed security into daily operations while supporting a culture of risk awareness and accountability.

Requirements

3–5 years of experience in information security, cybersecurity, or a related IT role.
Knowledge of core information security concepts such as access control, endpoint security, network security fundamentals, and incident response.
Experience working in a regulated environment.
Strong analytical, organizational, and problem-solving skills.
Ability to communicate clearly with both technical and non‑technical stakeholders.
Demonstrated ability to manage multiple priorities and work independently.

Nice To Haves

Healthcare experience.
Familiarity with Microsoft-based security technologies (e.g., Entra ID, Defender, Sentinel).
Exposure to third‑party risk management and vendor security reviews.
Industry certifications such as Security+, SSCP, or CISSP (or progress toward certification).

Responsibilities

Support day‑to‑day information security operations, including monitoring, incident response coordination, and follow‑up remediation.
Assist with identifying, assessing, and managing information security risks across systems, applications, and vendors.
Administer and support security technologies related to identity management, endpoint protection, logging and monitoring, and vulnerability management.
Maintain and help evolve information security policies, standards, and procedures.
Partner with IT and operational teams to ensure security considerations are incorporated into technology projects and system changes.
Support security training and awareness initiatives for the workforce.
Assist with audits, security assessments, and regulatory or compliance documentation requests.
Track and report security issues, incidents, and remediation efforts to IT leadership.
Maintain strict confidentiality and handle sensitive information appropriately.
Perform related duties as assigned.