Manager, IT Security

Tyvan LLC

About The Position

We are seeking an experienced Manager, IT Security. This job will have broad responsibilities for security related activities such as identity access management (IAM) using Okta, MFA, SSO, EDR, XDR, email security, Microsoft AD and Entra, web access firewall (WAF), and others. You will be managing and implementing information technology security solutions in addition to daily security operations. The ideal candidate will be a hands-on manager responsible for maintaining and enhancing the security posture of our enterprise, ensuring proper access controls, role-based security, network security, and supporting audit and compliance requirements with the IT Sox Manager, and the internal audit team.

Requirements

Bachelor’s degree in information technology, Cybersecurity, related fields of study, or an additional 4 years of experience.
10 or more years of experience in application security, cyber security, access management, and network security. Relevant experience will be considered.
Strong analytical and critical thinking skills with attention to detail.
Excellent verbal and written communication skills.

Nice To Haves

Hands-on experience with IAM management tools is a plus. Specifically Okta.
Understanding of SOX controls, segregation of duties (SoD), and financial application security would be a plus.
Healthcare experience in a hospital system with HIPAA experience being a plus.
CISSP
CCNP
CRISC
Or other related certifications

Responsibilities

Administer and monitor user access across applications and systems. How they relate to financial systems access will be a focus for SOX compliance. (e.g., Workday, Gorev, Waystar, and other financial applications).
Experience with SIEM, WAF, EDR, XDR, SSO, MFA, and other security technologies.
Lead the Okta implementation.
Administer and monitor other cyber security tools.
Ensure compliance with Sarbanes-Oxley (SOX) requirements related to application security and access controls.
Coordinate with internal and external auditors to support testing and remediation efforts.
Monitor security solutions for unusual access patterns or policy violations.
Perform periodic assessments of applications to identify and mitigate risks.
Work with application owners and vendors to address vulnerabilities and implement best practices.
Create remediation plans and follow through with implementation of those plans.
Develop, maintain, and enforce application security policies, procedures, and standards.
Ensure policies align with corporate governance and compliance frameworks.