Sr Manager - Cyber Defense

Children’s Hospital of Philadelphia•Philadelphia, PA

11d•$142,700 - $189,100•Onsite

About The Position

The Sr Manager, Cyber Defense will lead our SOC team and advance security operations across the health system. We are seeking a people leader who can transform an analyst team, strengthen incident response, and improve how we detect and respond to threats that could affect clinical operations. The ideal candidate brings hands-on expertise in Microsoft security technologies, SIEM/SOAR, detection and incident response using ServiceNow Security Incident Response, and automation, along with experience managing MDR services and working across technical and clinical teams. This role will turn those capabilities into a reliable, measurable service and help shape the next stage of our cyber defense program.

Requirements

Bachelor's Degree - Required
At least eight (8) years experience designing, developing, delivering, and managing Infrastructure and/or security solutions - Required
At least five (5) years experience managing Systems, Networking, Operation System standards, security or Hosting services - Required
At least three (3) years experience in a supervisory/managerial role with five or more team members in a production environment - Required
At least two (2) years experience leading Infrastructure and/or security projects - Required

Nice To Haves

Hands-on expertise in Microsoft security technologies
SIEM/SOAR
Detection and incident response using ServiceNow Security Incident Response
Automation
Experience managing MDR services
Working across technical and clinical teams

Responsibilities

Lead service strategy, design, operation and continuous service improvement.
Participate in tactical and strategic planning for the Technology and Security Services department, DTS and CHOP.
Demonstrate competency in strategic thinking and leadership.
Utilize knowledge of CHOP policies, procedures, culture, and requirements in order to develop, maintain, and support organizational and strategic initiatives.
Exercise independent judgment and creative problem solving techniques in a highly complex and dynamic environment.
Recommend, lead and implement scalable enterprise level solutions aligned with departmental and / or organization goals utilizing healthcare industry standards and best practices.
Demonstrate exceptional knowledge of and expertise in infrastructure and/or security technologies (such as Windows, AIX, system management, monitoring, end point protection and networking equipment), tools and techniques. Understand technology directions, trends and strategic business impact on key client initiatives.
Work across technology and business functions to implement sound designs which meet clinical and non-clinical requirements and enable business priorities.
Lead problem management, resolution and Determine root cause of problems and implement solutions to prevent the problem from recurring. Lead complex problem investigations.
Provide technical consulting, analysis and recommendations to the application teams.
Participate in the evaluation and recommendation of tools and technologies.
Implement security practices and procedures. Measure compliance. Participate in audits and manage corrective action plans.
Manage operations activities including metric reporting to DTS management and team members.
Maintain departmental asset inventory.
Manage operations and engineering teams at I, II, & III, Principal, Supervisory, contractor, vendor, and other staff in the delivery of infrastructure services.
Participate in the performance management process by setting goals, mentoring and coaching team members, providing feedback, and conducting reviews.
Participate in the candidate selection process.
Create a departmental Training and Development Plan.
Conduct staff meetings and 1-1 meetings monthly (at a minimum).
Maintain fiscal stewardship of all aspects of the department, including providing the following report analysis; resource planning, current financial standing, and support and project costs.
Upgrade database software and patches to maintain vendor support and remediate security vulnerabilities.
Develop product and version roadmaps.
Manage licenses.
Exhibit outstanding interpersonal, diplomacy and communication (written and verbal) skills with a wide variety of people from diverse professional and cultural backgrounds.
Communicate and partner with management, analysts, subject matter experts and end users to establish productive working relationships.
Participate in leadership meetings such as the DTS Directors and Managers meeting, special committees, and appropriate governance committees.
Demonstrate strong customer focus.
Manage client expectations.
Concisely communicate complex technical information and strategies in a way that establishes rapport, persuades others and promotes understanding.
Maintain a flexible and collaborative work style, with a pro-active and solutions-oriented approach.
Exhibit the ability to see the big picture and conceptualize/document creative solutions.
Maintain knowledge of business operations, strategies, information requirements and priorities.
Serve as business liaison to various vendors.
Exhibits commitment to professional development and self-improvement.
Demonstrate expertise in project management and SDLC methodology including the ability to effectively deploy resources and manage multiple projects in a cross functional environment.
Exhibit the ability to lead and manage projects for both clinical and business applications.
Lead implementation and support projects within the constraints of time, budget, and scope.
Allocate resources to projects.
Understand and comply with all enterprise and IS departmental information security policies, procedures and standards.
Support the integration of information security in the development, design, and implementation of Hospital Technology Resources that process, transmit, or store CHOP information.
Support all compliance activities related to state, federal regulatory requirements, healthcare accreditation standards, and all other applicable regulations that govern the use and disclosure of patient, financial, or other confidential information.