Cybersecurity Manager

Confluence Health

Wenatchee (WA)

On-site

USD 77,000 - 133,000

Full time

3 days ago

Be an early applicant

Application generator

A complete application in a minute — tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Medical, Dental & Vision Insurance

Flexible Spending Accounts & Health-Su

Paid Time Off

Generous Retirement Plans

Life Insurance

Long-Term Disability

Gym Membership Discount

Tuition Reimbursement

Employee Assistance Program

Adoption Assistance

Shift Differential

Job summary

Confluence Health in Washington state seeks a Cybersecurity Manager to lead teams across cybersecurity, identity/access, and network security engineering within a regulated healthcare environment. You will translate security strategy into daily operations, measure service outcomes, and develop staff while reporting to the Information Security Officer.

You will supervise staff, drive incident coordination, manage vendors, and ensure compliance with HIPAA, security policy, and governance

Qualifications

Bachelor’s degree in cybersecurity, information technology, or a related field.
6+ years in cybersecurity, information security, identity/access security, or network security.
2+ years of formal leadership or management experience.

Responsibilities

Directly supervise staff across cybersecurity, security operations/identity, and network security engineering.
Oversee incident coordination, vulnerability management, and security monitoring activities.
Lead or support security initiatives, planning, testing, and change control.
Develop and maintain team metrics, dashboards, and management summaries.
Ensure HIPAA Security Rule compliance and audit readiness.

Skills

Leadership

Education

Bachelor’s Degree in Cybersecurity, Computer Science, Information Technology, or related field

Tools

Microsoft security technologies

SIEM/SOAR

Endpoint security

Vulnerability management

Firewalls

Network access control

Privileged access management

Identity governance

Cloud security

Secure remote access

Job description

Salary Range

$55.87 - $96.87

Overview

Located in the heart of Washington, we enjoy open skies, snow-capped mountains, and the lakes and rivers of the high desert. We are the proud home of orchards, farms, and small communities. Confluence Health actively supports the communities we serve and their quality of life through our community support program and through our individual efforts as involved community members.

Full Time Employees of Confluence Health receive a wide range of benefits in addition to compensation.

Medical, Dental & Vision Insurance
Flexible Spending Accounts & Health Saving Accounts
Paid Time Off
Generous Retirement Plans
Life Insurance
Long-Term Disability
Gym Membership Discount
Tuition Reimbursement
Employee Assistance Program
Adoption Assistance
Shift Differential

For more information on our Benefits & Perks, click here!

Summary

The Cybersecurity Manager provides people leadership and operational management for the organization’s cybersecurity operations, identity/access, and network security engineering functions in a regulated healthcare environment. Reporting to the Information Security Officer, Director, this role converts security strategy, risk priorities, policies, and regulatory expectations into coordinated daily operations, measurable service outcomes, resilient technical practices, and staff development. The manager oversees workload, staffing, service delivery, incident coordination, technology operations, project execution, documentation, metrics, vendor performance, and cross-functional collaboration. The position serves as the primary management escalation point for assigned teams while preserving the Information Security Officer’s accountability for enterprise security governance, risk acceptance, regulatory oversight, executive reporting, and strategic direction.

Position Reports To: Information Security Officer, Director

Essential Functions

Directly supervises assigned staff across cybersecurity, security operations/identity, and network security engineering. Establishes clear expectations, assigns work, reviews results, provides regular coaching and feedback, supports career development, manages performance, and promotes cross-training and succession readiness.
Translates priorities established by the Information Security Officer into team plans, service objectives, assignments, schedules, and measurable outcomes. Balances operational support, incidents, projects, maintenance, compliance activities, and technical debt using risk and business impact.
Oversees daily security monitoring, alert triage, investigation, containment, remediation, recovery coordination, vulnerability management, and operational use of security platforms. Ensures activity is timely, documented, repeatable, and escalated according to approved procedures.
Oversees operational identity and access workflows, including account lifecycle support, authentication controls, privileged access processes, access reviews, exception handling, and audit evidence. Partners with application, HR, Compliance, Privacy, and IT teams to improve access governance and reduce inappropriate access risk.
Oversees secure operation and lifecycle management of enterprise network and network security services, including WAN/LAN, wireless, firewalls, segmentation, secure remote access, network access control, load balancing, monitoring, and connectivity dependencies. Ensures resiliency, change discipline, documentation, and effective escalation during outages or security events.
Serves as the management escalation point for cybersecurity incidents, identity-related events, network disruptions, and high-impact operational issues. Coordinates technical resources, communications, evidence preservation, remediation, recovery, root-cause follow-up, and after-action improvements. Promptly escalates material risk and required decisions to the Information Security Officer.
Maintains effective intake, prioritization, escalation, and closure practices for incidents, requests, problems, and recurring work. Reviews queues, dashboards, documentation, service quality, aging items, and customer-impacting trends; addresses barriers and drives corrective actions.
Ensures assigned security and network platforms are maintained, monitored, documented, supported, and operated in accordance with approved architecture, change management, access, backup, recovery, and configuration standards. Coordinates lifecycles plans, capacity needs, upgrades, and operational readiness.
Leads or supports security and network initiatives, implementation planning, resource coordination, testing, operational acceptance, documentation, and transition to support. Ensures changes follow organizational change controls and that operational risks, dependencies, and rollback considerations are identified.
Develops and maintains meaningful team metrics, service dashboards, risk and remediation tracking, initiative status, trend analysis, and management summaries. Uses results to improve performance, resource planning, reliability, control effectiveness, and executive visibility through the Information Security Officer.
Implements and monitors operational practices supporting HIPAA Security Rule requirements, organizational policies, audit commitments, contractual security requirements, DNV-related expectations, and other applicable obligations. Coordinates evidence collection, remediation tracking, access/process reviews, and audit readiness without assuming the designated HIPAA Security Officer function.
Manages day-to-day vendor relationships, support performance, licensing, renewals, quotes, and assigned contracts. Assists the Information Security Officer with capital and operating budget development, forecasting, prioritization, and business justification.
Builds effective working relationships with IT, Clinical Applications, Privacy, Compliance, Legal, Human Resources, Project Management, business leaders, and vendors. Communicates operational risk, service impacts, priorities, and decisions in clear business and technical terms.
Ensures procedures, runbooks, standards, inventories, architecture references, escalation paths, and knowledge articles are current, usable, and consistently followed. Recommends policy and control improvements to the Information Security Officer.
Maintains current knowledge of cybersecurity threats, healthcare security requirements, identity and access practices, network security, and leadership methods. Participates in after-hours support or on-call escalation as assigned.
Performs other duties as assigned.

Demonstrate standards of behavior and adhere to the Code of Conduct in all aspects of job performance at all times.

Qualifications

Required:

Bachelor’s Degree in Cybersecurity, Computer Science, Information Technology, or a related field, or an equivalent combination of education and relevant experience.
6 years of progressive experience in cybersecurity, information security, identity/access security, network security, or related enterprise technology disciplines and 2 or more years of formal leadership, supervision, or management experience within technical or security teams.
Two or more certifications such as CISSP, CISM, Security+, CCNP Security, GIAC, CRISC, or a role-aligned cloud, identity, network, or vendor certification.

Required:

Experience in healthcare or another highly regulated environment.
Experience with Microsoft security technologies, SIEM/SOAR, endpoint security, vulnerability/exposure management, firewalls, network access control, privileged access management, identity governance, cloud security, and secure remote access.

Physical/Sensory Demands

O = Occasional, represents 1 to 25% or up to 30 minutes in a 2 hour workday.

F = Frequent, represents 26 to 50% or up to 1 hour of a 2 hour workday.

C = Continuous, represents 51% to 100% or up to 2 hours of a 2 hour workday.

Physical/Sensory Demands ForThis Position