Systems Security Manager

University of Wisconsin Hospitals and Clinics Authority•Madison, WI

1d•Hybrid

About The Position

UW Health is seeking a Systems Security Manager to lead a talented cybersecurity team, manage complex incidents, and strengthen the organization’s resilience. The role calls for calm, clear, decisive leadership during high-stakes situations; technical credibility across cybersecurity disciplines; and effective communication with leaders and stakeholders. The manager will make risk-based decisions with incomplete information while balancing security, operations, and patient care. They will build and develop accountable teams, improve incident response practices, turn lessons learned into stronger controls and preparedness, and foster partnerships across technical, operational, clinical, Legal, Privacy, and Communications teams. The role also includes responsible financial stewardship and identifying opportunities to reduce unnecessary spending. This is a full-time, Monday-through-Friday position with core hours between 8:00 AM and 5:00 PM. The position is hybrid, with regular onsite work at various UW Health locations; hours and hybrid arrangements may vary according to departmental operational needs.

Requirements

Bachelor’s degree required; four years of relevant experience may be considered in lieu of the degree, in addition to the experience requirements.
Three years of experience planning and implementing mid- to large-scale security or technical projects.
Three years of supervisory or management experience.
Bachelor’s or master’s degree in Healthcare, Information Technology, Business, or a related field preferred.
Extensive project management experience preferred.
Five years of supervisory or management experience preferred.
Experience developing and supporting applications deployed in a 24x7 healthcare setting preferred.
CISSP preferred.
Other security and/or technical certifications preferred.

Nice To Haves

Bachelor’s or master’s degree in Healthcare, Information Technology, Business, or a related field.
Extensive project management experience.
Five years of supervisory or management experience.
Experience developing and supporting applications deployed in a 24x7 healthcare setting.
CISSP certification.
Other security and/or technical certifications.

Responsibilities

Lead cybersecurity incident response by establishing command, priorities, ownership, and direction.
Make risk-based decisions under uncertainty while balancing security, operations, and patient care.
Provide technical leadership across incident response, forensics, identity, endpoint, cloud, network, detection, and threat response.
Communicate cyber risks clearly to leaders and stakeholders.
Build and develop strong teams, establish accountability, and reduce reliance on individual heroics.
Strengthen playbooks, escalation processes, exercises, and after-action reviews.
Use lessons learned from incidents to improve controls, processes, detection, and preparedness.
Build partnerships with technical, operational, clinical, Legal, Privacy, and Communications teams.
Steward financial resources thoughtfully, making sound investments and identifying opportunities to reduce unnecessary spending.
Plan and implement mid- to large-scale security or technical projects.