Information Security Manager — Lead VMP & GRC

Avita Pharmacy; United States; Sur place; USD 130 000 - 170 000; Plein temps

Avantages offerts par ce poste

Healthcare benefits

Paid time off

401(k) retirement plan with company

Six company paid holidays

Résumé du poste

Avita Care Solutions seeks an Information Security Manager to own day-to-day security program execution in support of enterprise goals. The role blends hands-on security operations, governance, risk and compliance, and provider oversight to advance the Vulnerability Management Program across providers.

You will coach the Information Security team, coordinate across technical owners, and drive practical delivery while ensuring HIPAA/privacy considerations are integrated into every action.

Qualifications

• A relevant degree or equivalent professional experience.
• Healthcare security experience preferred.
• CISSP, CISM or comparable certification preferred.
• Hands-on judgment across infrastructure, endpoints, identity, networks and cloud.
• Experience with ITSM, GRC, TPRM and audits.

Responsabilités

• Advance and enforce Vulnerability Management across MSP/MSSP and providers.
• Manage security providers and service outcomes with regular reviews.
• Own ITSM workflows and integration requirements end-to-end.
• Run GRC and Third-Party Risk Management platforms and processes.
• Lead operational incident response with root-cause analysis and improvements.
• Execute the security roadmap with accountability and reporting.

Connaissances

GRC

Vendor management

Incident response

Security operations

Formation

Bachelor's degree in Information Security or related field

Description du poste

Avita Care Solutions seeks an Information Security Manager to own day-to-day security program execution in support of enterprise goals. The role blends hands-on security operations, governance, risk and compliance, and provider oversight to advance the Vulnerability Management Program across providers.

You will coach the Information Security team, coordinate across technical owners, and drive practical delivery while ensuring HIPAA/privacy considerations are integrated into every action.