Senior Manager, Cyber Security

Clinisys•Morrisville, NC

7d•Hybrid

About The Position

The Senior Manager of Cyber Security is a senior operational leader within Clinisys’ global Information Technology organization. Based in the Raleigh, North Carolina office on a hybrid basis, this role leads the day-to-day delivery and continuous improvement of the cyber security program across corporate technology, cloud and SaaS environments, products, and customer-facing services. The role translates cyber strategy, risk priorities, regulatory obligations, and customer commitments into clear plans, accountable execution, and measurable outcomes. Working closely with the VP of IT / CIO | CISO, the Senior Manager leads and develops cyber security professionals, coordinates activity across technology and business teams, and serves as an escalation point for cyber risk, incidents, control weaknesses, and remediation. The position combines people leadership, program ownership, and hands-on management oversight. Enterprise cyber strategy, final risk acceptance, and executive accountability remain with the CIO | CISO. The role requires regular collaboration across global time zones, occasional travel to other Clinisys offices, customer locations, suppliers, or company events, and flexibility to support significant cyber incidents and urgent business needs outside normal working hours. New employees must attend or travel to a designated Clinisys office on their first day for identity verification, employment documentation, equipment issuance, introductions, and orientation.

Requirements

Typically 8 or more years of progressive experience in cyber security, information security, technology risk, or a related discipline, including substantial people-management and operational leadership responsibility.
Experience leading multiple cyber security disciplines, a significant security program, or a security operations function within a global SaaS, software, healthcare technology, life sciences, or similarly regulated organization.
Practical experience with ISO 27001, SOC 2, GDPR, NIST Cybersecurity Framework, Cyber Essentials Plus, secure software development, cloud security, and risk-based control improvement.
Demonstrated experience managing significant security incidents, audits or certifications, penetration testing, vulnerability remediation, third-party security risk, and executive-level reporting.
Bachelor’s degree in Cyber Security, Computer Science, Information Systems, Engineering, or a related field, or equivalent relevant professional experience.
One or more recognized security certifications such as CISSP, CISM, CRISC, CISA, CCSP, or equivalent.
Broad practical knowledge across security operations, incident response, governance, risk and compliance, vulnerability management, cloud security, identity, application security, third-party risk, and customer assurance.
Ability to lead engineers, analysts, and compliance professionals, including setting direction, managing performance, developing capability, and creating accountability across locations.
Ability to translate technical findings, regulatory obligations, and security frameworks into prioritized actions, measurable plans, and concise business risk reporting.
Strong judgment under pressure and ability to coordinate complex incidents, make timely recommendations, and appropriately escalate material risk.
Credible stakeholder management and communication skills with executives, auditors, customers, parent-company stakeholders, suppliers, product leaders, and technical teams.
Commercial and customer-trust mindset that balances risk reduction, regulatory obligations, delivery speed, usability, and cost.
Organized, outcome-focused approach to portfolio delivery, metrics, remediation governance, supplier performance, and team operations.
Flexibility to support significant cyber incidents and urgent business needs outside normal working hours.

Nice To Haves

Experience in healthcare software, diagnostic or laboratory systems, or environments handling sensitive health and laboratory information.
Experience within a multi-company operating model and responding to parent-company control requirements and maturity assessments.
Knowledge of AWS, Microsoft Azure, modern SaaS architectures, DevSecOps practices, and contemporary security tooling.
Experience supporting security integration, organizational change, or remediation of acquired and legacy technology environments.

Responsibilities

Lead security monitoring, alert triage, detection, investigation, response, and escalation across corporate, cloud, product, and customer service environments.
Maintain and exercise cyber incident response plans and playbooks; coordinate technical teams and partners during significant incidents and ensure containment, evidence preservation, root cause analysis, communications support, and corrective actions.
Oversee internal and outsourced security services, including service performance, monitoring coverage, alert quality, escalation paths, case management, and improvement follow-through.
Provide operational reporting on incidents, vulnerabilities, control health, remediation progress, recurring themes, and emerging threats; promptly escalate material risks or delays.
Participate in a leadership escalation rotation and support time-sensitive cyber incidents outside standard working hours when required.
Operationalize the cyber security strategy, roadmap, policies, standards, and control framework established by the CIO | CISO, translating objectives into prioritized delivery plans and accountable workstreams.
Manage cyber risk and control assurance, ensuring risks are documented, assessed, assigned to accountable owners, supported by treatment plans, and escalated when exposure exceeds agreed tolerance.
Coordinate evidence, remediation, and continuous-compliance activities for ISO 27001, SOC 2, Cyber Essentials Plus, GDPR, NHS requirements, customer obligations, Roper Technologies control criteria, and other applicable standards or attestations.
Partner with Legal, Privacy, Compliance, Internal Audit, and business stakeholders to ensure security requirements are understood, implemented, evidenced, and maintained.
Lead or support internal and external audits, control assessments, customer reviews, penetration-test follow-up, and regulatory or contractual assurance activities.
Oversee vulnerability management across infrastructure, endpoints, cloud services, applications, and products, including scanning coverage, risk-based prioritization, remediation tracking, exception management, and reporting.
Coordinate independent penetration testing and security assessments, translating findings into remediation plans with owners and target dates and escalating overdue high-risk items.
Partner with IT Operations, Cloud Operations, Enterprise Architecture, Product, and Engineering to embed proportionate security review into architecture, change, deployment, and operational processes.
Promote effective controls for identity and access management, privileged access, multi-factor authentication, endpoint protection, logging, encryption, configuration management, backup protection, and secure cloud operations.
Support secure-by-design and privacy-by-design practices across SaaS, software development, APIs, integrations, and DevOps delivery, including pragmatic automated security testing and release risk criteria.
Manage cyber security due diligence and ongoing assurance for critical suppliers, cloud providers, technology partners, and other third parties with access to Clinisys systems, products, or sensitive information.
Ensure supplier risks, exceptions, contractual commitments, and remediation actions are documented, assigned, monitored, and escalated appropriately.
Support customer assurance, security questionnaires, audits, due diligence, and sales engagements with accurate, consistent, reusable evidence.
Work with Sales, Legal, Product, and Compliance to ensure customer security commitments are achievable, approved, and reflected in operational controls.
Lead, coach, and develop a globally distributed cyber security team, establishing priorities, objectives, decision rights, service ownership, performance expectations, and development plans.
Manage delivery across the cyber security portfolio, balancing operational demands, risk reduction, audit commitments, projects, and team capacity; surface dependencies and trade-offs early.
Support workforce planning, supplier management, budget forecasting, tooling lifecycle decisions, and business cases for cyber security investment.
Establish an operating rhythm for incidents, risks, vulnerabilities, audits, projects, metrics, and team development, with concise updates for the CIO | CISO and governance forums.
Drive continuous improvement through process standardization, automation, data quality, control rationalization, and responsible use of AI-enabled security capabilities.
Promote a practical security culture through trusted guidance, role-based awareness, and support for informed risk decisions without unnecessary friction.
Collaborate regularly across global time zones and travel occasionally to Clinisys offices, customer locations, suppliers, or company events.
Attend or travel to a designated Clinisys office on the first day of employment for onboarding requirements.