CYBERSECURITY MANAGER

Confluence Health; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Job summary

Confluence Health is seeking a Cybersecurity Manager to lead cybersecurity operations, identity/access, and network security engineering in a regulated healthcare environment. This role reports to the Information Security Officer and translates security strategy into daily operations, service outcomes, and staff development.

You will supervise teams, coordinate incidents, manage vendor relationships, and drive governance, risk management, and regulatory compliance, including HIPAA, while

Qualifications

• Bachelors in Cybersecurity, CS, IT or equivalent experience.
• 6+ years in cybersecurity with 2+ years leading teams.
• Two or more certifications such as CISSP, CISM, Security+ or equivalent.
• Experience in healthcare or highly regulated environments.
• Experience with Microsoft security technologies, SIEM/SOAR, endpoints, firewalls, identity governance.

Responsibilities

• Directly supervise staff across cybersecurity, security operations, and network security engineering.
• Translate priorities into team plans, objectives, and measurable outcomes.
• Oversee daily security monitoring, triage, investigation, containment, and remediation.
• Oversee identity and access workflows and access governance.
• Oversee enterprise network security services and secure remote access.
• Serve as escalation point for incidents and high-impact operational issues.
• Maintain runbooks, standards, and documentation; drive policy improvements.
• Develop meaningful team metrics and executive dashboards.
• Build relationships with IT, Privacy, Compliance, Legal, HR, PM, and vendors.

Skills

Leadership

Cybersecurity

Identity/access security

Network security

HIPAA compliance

Vendor management

Budgeting

Education

Bachelor's degree in cybersecurity / related field

Tools

Microsoft security technologies

SIEM/SOAR

Firewall management

Identity governance

Cloud security

Job description

Overview

The Cybersecurity Manager provides people leadership and operational management for the organization’s cybersecurity operations, identity/access, and network security engineering functions in a regulated healthcare environment. Reporting to the Information Security Officer, Director, this role converts security strategy, risk priorities, policies, and regulatory expectations into coordinated daily operations, measurable service outcomes, resilient technical practices, and staff development. The manager oversees workload, staffing, service delivery, incident coordination, technology operations, project execution, documentation, metrics, vendor performance, and cross-functional collaboration. The position serves as the primary management escalation point for assigned teams while preserving the Information Security Officer’s accountability for enterprise security governance, risk acceptance, regulatory oversight, executive reporting, and strategic direction.

Position Reports To

Information Security Officer, Director

Responsibilities

• Directly supervises assigned staff across cybersecurity, security operations/identity, and network security engineering. Establishes clear expectations, assigns work, reviews results, provides regular coaching and feedback, supports career development, manages performance, and promotes cross-training and succession readiness.
• Translates priorities established by the Information Security Officer into team plans, service objectives, assignments, schedules, and measurable outcomes. Balances operational support, incidents, projects, maintenance, compliance activities, and technical debt using risk and business impact.
• Oversees daily security monitoring, alert triage, investigation, containment, remediation, recovery coordination, vulnerability management, and operational use of security platforms. Ensures activity is timely, documented, repeatable, and escalated according to approved procedures.
• Oversees operational identity and access workflows, including account lifecycle support, authentication controls, privileged access processes, access reviews, exception handling, and audit evidence. Partners with application, HR, Compliance, Privacy, and IT teams to improve access governance and reduce inappropriate access risk.
• Oversees secure operation and lifecycle management of enterprise network and network security services, including WAN/LAN, wireless, firewalls, segmentation, secure remote access, network access control, load balancing, monitoring, and connectivity dependencies. Ensures resiliency, change discipline, documentation, and effective escalation during outages or security events.
• Serves as the management escalation point for cybersecurity incidents, identity-related events, network disruptions, and high-impact operational issues. Coordinates technical resources, communications, evidence preservation, remediation, recovery, root-cause follow-up, and after-action improvements. Promptly escalates material risk and required decisions to the Information Security Officer.
• Maintains effective intake, prioritization, escalation, and closure practices for incidents, requests, problems, and recurring work. Reviews queues, dashboards, documentation, service quality, aging items, and customer-impacting trends; addresses barriers and drives corrective actions.
• Ensures assigned security and network platforms are maintained, monitored, documented, supported, and operated in accordance with approved architecture, change management, access, backup, recovery, and configuration standards. Coordinates lifecycle plans, capacity needs, upgrades, and operational readiness.
• Leads or supports security and network initiatives, implementation planning, resource coordination, testing, operational acceptance, documentation, and transition to support. Ensures changes follow organizational change controls and that operational risks, dependencies, and rollback considerations are identified.
• Develops and maintains meaningful team metrics, service dashboards, risk and remediation tracking, initiative status, trend analysis, and management summaries. Uses results to improve performance, resource planning, reliability, control effectiveness, and executive visibility through the Information Security Officer.
• Implements and monitors operational practices supporting HIPAA Security Rule requirements, organizational policies, audit commitments, contractual security requirements, DNV-related expectations, and other applicable obligations. Coordinates evidence collection, remediation tracking, access/process reviews, and audit readiness without assuming the designated HIPAA Security Officer function.
• Manages day-to-day vendor relationships, support performance, licensing, renewals, quotes, and assigned contracts. Assists the Information Security Officer with capital and operating budget development, forecasting, prioritization, and business justification.
• Builds effective working relationships with IT, Clinical Applications, Privacy, Compliance, Legal, Human Resources, Project Management, business leaders, and vendors. Communicates operational risk, service impacts, priorities, and decisions in clear business and technical terms.
• Ensures procedures, runbooks, standards, inventories, architecture references, escalation paths, and knowledge articles are current, usable, and consistently followed. Recommends policy and control improvements to the Information Security Officer.
• Maintains current knowledge of cybersecurity threats, healthcare security requirements, identity and access practices, network security, and leadership methods. Participates in after-hours support or on-call escalation as assigned.
• Performs other duties as assigned. Demonstrate standards of behavior and adhere to the Code of Conduct in all aspects of job performance at all times.

Qualifications

• Bachelor’s Degree in Cybersecurity, Computer Science, Information Technology, or a related field, or an equivalent combination of education and relevant experience.
• 6 years of progressive experience in cybersecurity, information security, identity/access security, network security, or related enterprise technology disciplines and 2 or more years of formal leadership, supervision, or management experience within technical or security teams.
• Two or more certifications such as CISSP, CISM, Security+, CCNP Security, GIAC, CRISC, or a role-aligned cloud, identity, network, or vendor certification.
• Required: Experience in healthcare or another highly regulated environment.
• Experience with Microsoft security technologies, SIEM/SOAR, endpoint security, vulnerability/exposure management, firewalls, network access control, privileged access management, identity governance, cloud security, and secure remote access.