Manager, IT Security

Tyvan LLC

About The Position

The Manager, IT Security is a hands-on role responsible for managing and implementing information technology security solutions and daily security operations. The role helps maintain and enhance the enterprise security posture, including access controls, role-based security, network security, and support for audit and compliance requirements in partnership with the IT SOX Manager and internal audit team. The position covers identity and access management using tools such as Okta, as well as MFA, SSO, EDR, XDR, email security, Microsoft AD and Entra, WAF, SIEM, and other cybersecurity technologies. The role also leads the Okta implementation and supports SOX compliance and audit activities.

Requirements

Bachelor’s degree in information technology, cybersecurity, or a related field, or an additional four years of experience.
10 or more years of experience in application security, cybersecurity, access management, and network security; relevant experience will be considered.
Strong analytical and critical-thinking skills, with attention to detail.
Excellent verbal and written communication skills.

Nice To Haves

Hands-on experience with IAM management tools, particularly Okta.
Understanding of SOX controls, segregation of duties (SoD), and financial application security.
Healthcare experience in a hospital system and HIPAA experience.
CISSP, CCNP, CRISC, or other related certifications.

Responsibilities

Administer and monitor user access across applications and systems, with a focus on financial systems access for SOX compliance, including Workday, Gorev, Waystar, and other financial applications.
Work with SIEM, WAF, EDR, XDR, SSO, MFA, and other security technologies.
Lead the Okta implementation.
Administer and monitor other cybersecurity tools.
Ensure compliance with SOX requirements related to application security and access controls.
Coordinate with internal and external auditors on testing and remediation efforts.
Monitor security solutions for unusual access patterns or policy violations.
Periodically assess applications to identify and mitigate risks.
Work with application owners and vendors to address vulnerabilities and implement best practices.
Create remediation plans and follow through with their implementation.
Develop, maintain, and enforce application security policies, procedures, and standards.
Ensure policies align with corporate governance and compliance frameworks.