Senior Manager, Cyber Security

Clinisys•Morrisville, NC

7d•$135,000 - $180,000•Hybrid

About The Position

The Senior Manager of Cyber Security is a senior operational leader within Clinisys’ global Information Technology organization. Based in the Raleigh, North Carolina office on a hybrid basis, this role leads day-to-day delivery and continuous improvement of the cyber security program across corporate technology, cloud and SaaS environments, products, and customer-facing services. The position translates cyber strategy, risk priorities, regulatory obligations, and customer commitments into prioritized plans, accountable execution, and measurable outcomes. Working closely with the VP of IT / CIO | CISO, the Senior Manager leads and develops cyber security professionals, coordinates work across technology and business teams, and serves as a trusted escalation point for cyber risk, incidents, control weaknesses, and remediation. The role combines people leadership, program ownership, and hands-on management oversight; enterprise cyber strategy, final risk acceptance, and executive accountability remain with the CIO | CISO. The role requires regular collaboration across global time zones, occasional travel to other Clinisys offices, customer locations, suppliers, or company events, and flexibility to support significant cyber incidents and urgent business needs outside normal working hours. New employees must attend or travel to a designated Clinisys office on their first day for onboarding activities.

Requirements

Typically 8 or more years of progressive experience in cyber security, information security, technology risk, or a related discipline, including substantial people-management and operational leadership responsibility.
Experience leading multiple cyber security disciplines, a significant security program, or a security operations function within a global SaaS, software, healthcare technology, life sciences, or similarly regulated organization.
Practical experience with ISO 27001, SOC 2, GDPR, NIST Cybersecurity Framework, Cyber Essentials Plus, secure software development, cloud security, and risk-based control improvement.
Demonstrated experience managing significant security incidents, audits or certifications, penetration testing, vulnerability remediation, third-party security risk, and executive-level reporting.
Bachelor’s degree in Cyber Security, Computer Science, Information Systems, Engineering, or a related field, or equivalent relevant professional experience.
One or more recognized security certifications such as CISSP, CISM, CRISC, CISA, CCSP, or equivalent.
Broad practical knowledge across security operations, incident response, governance, risk and compliance, vulnerability management, cloud security, identity, application security, third-party risk, and customer assurance.
Ability to lead engineers, analysts, and compliance professionals, including setting direction, managing performance, developing capability, and creating accountability across locations.
Ability to translate technical findings, regulatory obligations, and security frameworks into prioritized actions, measurable plans, and concise business risk reporting.
Strong judgment under pressure and ability to coordinate complex incidents, make timely recommendations, and escalate material risk appropriately.
Credible stakeholder management and communication skills with executives, auditors, customers, parent-company stakeholders, suppliers, product leaders, and technical teams.
Commercial and customer-trust mindset, balancing risk reduction, regulatory obligations, delivery speed, usability, and cost.
Organized, outcome-focused approach to portfolio delivery, metrics, remediation governance, supplier performance, and team operations.
Ability to collaborate across global time zones and support significant cyber incidents and urgent business needs outside normal working hours.

Nice To Haves

Experience in healthcare software, diagnostic or laboratory systems, or environments handling sensitive health and laboratory information.
Experience working within a multi-company operating model and responding to parent-company control requirements and maturity assessments.
Knowledge of AWS, Microsoft Azure, modern SaaS architectures, DevSecOps practices, and contemporary security tooling.
Experience supporting security integration, organizational change, or remediation of acquired and legacy technology environments.

Responsibilities

Lead security monitoring, alert triage, detection, investigation, response, and escalation across corporate, cloud, product, and customer service environments.
Maintain and exercise cyber incident response plans and playbooks; coordinate teams and partners during significant incidents, including containment, evidence preservation, root cause analysis, communications support, and corrective actions.
Oversee internal and outsourced security services, including service performance, monitoring coverage, alert quality, escalation paths, case management, and improvement follow-through.
Report on incidents, vulnerabilities, control health, remediation progress, recurring themes, and emerging threats; promptly escalate material risks or delays.
Participate in a leadership escalation rotation and support time-sensitive cyber incidents outside standard working hours when required.
Operationalize the cyber security strategy, roadmap, policies, standards, and control framework established by the CIO | CISO.
Manage cyber risk and control assurance, documenting and assessing risks, assigning accountable owners, tracking treatment plans, and escalating exposure beyond agreed tolerance.
Coordinate evidence, remediation, and continuous-compliance activities for ISO 27001, SOC 2, Cyber Essentials Plus, GDPR, NHS requirements, customer obligations, Roper Technologies control criteria, and other applicable standards or attestations.
Partner with Legal, Privacy, Compliance, Internal Audit, and business stakeholders to implement, evidence, and maintain security requirements.
Lead or support audits, control assessments, customer reviews, penetration-test follow-up, and regulatory or contractual assurance activities.
Oversee vulnerability management across infrastructure, endpoints, cloud services, applications, and products, including scanning coverage, risk-based prioritization, remediation tracking, exception management, and reporting.
Coordinate independent penetration testing and security assessments, turning findings into remediation plans with owners and target dates and escalating overdue high-risk items.
Partner with IT Operations, Cloud Operations, Enterprise Architecture, Product, and Engineering to embed proportionate security review into architecture, change, deployment, and operational processes.
Promote effective controls for identity and access management, privileged access, multi-factor authentication, endpoint protection, logging, encryption, configuration management, backup protection, and secure cloud operation.
Support secure-by-design and privacy-by-design practices across SaaS, software development, APIs, integrations, and DevOps, including automated security testing and release risk criteria.
Manage cyber security due diligence and ongoing assurance for critical suppliers, cloud providers, technology partners, and other third parties with access to Clinisys systems, products, or sensitive information.
Document, assign, monitor, and escalate supplier risks, exceptions, contractual commitments, and remediation actions.
Support customer assurance, security questionnaires, audits, due diligence, and sales engagements with accurate, consistent, reusable evidence.
Work with Sales, Legal, Product, and Compliance to ensure customer security commitments are achievable, approved, and reflected in operational controls.
Lead, coach, and develop a globally distributed cyber security team, establishing priorities, objectives, decision rights, service ownership, performance expectations, and development plans.
Manage cyber security portfolio delivery, balancing operational demands, risk reduction, audit commitments, projects, and team capacity; surface dependencies and trade-offs early.
Support workforce planning, supplier management, budget forecasting, tooling lifecycle decisions, and business cases for cyber security investment.
Establish an operating rhythm for incidents, risks, vulnerabilities, audits, projects, metrics, and team development, with concise updates for the CIO | CISO and governance forums.
Drive continuous improvement through process standardization, automation, data quality, control rationalization, and responsible use of AI-enabled security capabilities.
Promote a practical security culture through trusted guidance, role-based awareness, and support for informed risk decisions.