IT Cybersecurity Manager

Fair Haven Community Health Care; New Haven (CT); On-site; USD 120,000 - 160,000; Full time

Job summary

Fair Haven Community Health Care is seeking an IT Cybersecurity Manager to lead and advance the organization’s cybersecurity program across multiple sites. You will oversee threat monitoring, incident response, vulnerability management, and governance activities to protect FHCHC’s systems, networks, and data.

Reporting to the VP of Data & Technology, you will coordinate with vendors, enforce security policies, and guide IAM, CI/CD security, and risk assessments to strengthen the organization’s

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, IT, or related field required; Master’s degree preferred.
• Industry certifications preferred (e.g., security, cloud, security+ or infrastructure-focused).

Responsibilities

• Monitor networks, systems, applications, and infrastructure for threats using SIEM, IDS/IPS, EDR, and related tools.
• Investigate and respond to security incidents, breaches, and malware infections, ensuring timely remediation and reporting.
• Provide after-hours incident response as part of an on-call rotation.
• Perform vulnerability scanning, assessment, remediation, and penetration testing (e.g., Nessus, Wazuh).
• Develop and enforce AI Security policies to protect proprietary information.
• Create and maintain the enterprise’s security architecture design.
• Manage IAM functions, including Active Directory authentication and access control.
• Support CI/CD security processes, including analysis, testing, and deployment.
• Deliver cybersecurity awareness programs and trainings.
• Collaborate with internal teams and external vendors to implement security best practices.

Skills

Cybersecurity

Security Monitoring

Incident Response

Vulnerability Management

Risk Assessment

IAM

Active Directory

PowerShell

Scripting

Networking

EDR

SIEM

IDS/IPS

DLP

Education

Bachelor’s degree in Cybersecurity/Computer Science/IT

Master’s degree preferred

Tools

SIEM

Nessus

Bloodhound

ESET

EDR

IDS/IPS

DLP

Active Directory

PowerShell

Job description

Fair Haven Community Health Care has been an innovative and vibrant community health center for over 54 years, catering to multiple generations with over 165,000 office visits across 21 locations. Guided by a Board of Directors, most of whom are patients themselves, we take pride in being a healthcare leader dedicated to delivering high‑quality, affordable medical and dental care to everyone, regardless of insurance status or ability to pay. Our extensive range of primary and specialty care services, along with evidence‑based programs, empowers patients to make informed choices about their health. As we expand our reach to underserved areas, our commitment to prioritizing patient needs remains unwavering. FHCHC’s mission is to enhance the health and social well‑being of the communities we serve through equitable, high‑quality, and culturally responsive patient‑centered care.

Job purpose

The IT Cybersecurity Manager oversees, supports, and advances Fair Haven Community Health Center’s cybersecurity program and associated processes, including email security, vulnerability management, incident response, data loss prevention, and the implementation of enterprise security initiatives. As an individual contributor this role provides leadership and coordination for cybersecurity activities across the organization and ensures the confidentiality, integrity, and availability of FHCHC systems, networks, and data.

Duties and responsibilities

Reporting to the Vice President, Data & Technology, the IT Cybersecurity Manager will monitor, analyze, and detect cyber events and incidents within information systems and networks. Typical duties include but are not limited to:

Strategic Leadership & Compliance

• Prepare and deliver comprehensive security posture and risk assessment presentations to organization stakeholders.
• Apply deep knowledge of Cybersecurity Insurance requirements to ensure policy compliance and continuous coverage.

Vendor & AI Security Management

• Act as the primary technical liaison with Wipfli Cybersecurity vendor for co‑managed services and audits.
• Develop and enforce AI Security policies to protect proprietary information from unauthorized exposure to public AI models.

Security Monitoring & Incident Response

• Monitor networks, systems, applications, and infrastructure for threats using SIEM, IDS/IPS, EDR, and related tools.
• Investigate and respond to security incidents, breaches, and malware infections, ensuring timely remediation and reporting.
• Provide after‑hours incident response as part of an on‑call rotation.

Vulnerability & Risk Management

• Perform vulnerability scanning, assessment, remediation, and penetration testing (e.g., Nessus, Wazuh).
• Conduct risk assessments and recommend mitigation strategies to reduce exposure to cyber threats.
• Patch, update, and harden systems to address vulnerabilities and operational risks.

Security Engineering & Administration

• Create and maintain the enterprise’s security architecture design.
• Implement and maintain security technologies including firewalls, access controls, IDS/IPS, endpoint protection, and DLP.
• Manage IAM functions, including Active Directory authentication, authorization, and account security.
• Support CI/CD security processes, including analysis, testing, and deployment.
• Maintain up‑to‑date knowledge of the IT security industry and emerging threats.

Infrastructure & Systems Support

• Configure, deploy, migrate, and troubleshoot VMware and Microsoft Hyper‑V environments, including load balancing, NIC teaming, and failover.
• Maintain network equipment and core IT infrastructure to ensure secure, reliable operations.
• Automate operational and security tasks using PowerShell and other scripting tools.

Governance, Policy, & Training

• Develop, maintain, and enforce cybersecurity policies, standards, and procedures.
• Deliver cybersecurity awareness programs, training, and workshops to promote a security‑first culture.

Collaboration & Continuous Improvement

• Work with internal teams and external vendors to implement security best practices and evaluate new technologies.
• Identify system or workflow deficiencies and recommend improvements.
• Contribute to planning, development, and deployment of major IT and cybersecurity projects.
• Provide expertise in workflow design, system architecture, testing, and implementation.

Qualifications

Education & Certifications

• Bachelor’s degree in Cybersecurity, Computer Science, IT, or related field required; Master’s degree preferred.
• Industry certifications preferred (e.g., security, cloud, security+, or infrastructure‑focused).

Experience

• A minimum of 5 years of progressive experience in cybersecurity or IT operations.
• Healthcare environment experience preferred, including familiarity with HIPAA/PHI requirements.
• Hands‑on experience with security monitoring, incident response, and threat mitigation.

Technical Skills

• Proficient with Microsoft Windows 11, Windows Server, and Microsoft 365/Office 365 security tools.
• Expert proficiency with SIEM, Nessus, Bloodhound, and ESET tools.
• Strong understanding of OS security, IAM, Active Directory, authentication, and access control.
• Solid networking knowledge: TCP/IP, DNS, VPNs, firewalls, routers, switches, and cabling.
• Experience managing and supporting cybersecurity technologies (EDR, SIEM, IDS/IPS, DLP, firewalls).
• Familiarity with common attack vectors (malware, phishing, social engineering) and encryption methods.
• Ability to configure, monitor, and maintain security systems to detect and mitigate threats.

Professional Skills

• Strong analytical thinking, problem‑solving, and attention to detail.
• Demonstrated curiosity, initiative, and a proactive approach to identifying risks and improvements.
• Effective written and verbal communication skills, including documentation and translating technical concepts for non‑technical audiences.
• Ability to work independently and collaboratively in a team‑oriented environment.

American with Disabilities Requirements: External and internal applicants, as well as position incumbents who become disabled, must be able to perform the essential job‑specific functions either unaided or with the assistance of a reasonable accommodation to be determined by the organization on a case‑by‑case basis.

Fair Haven Community Health Care is an Equal Opportunity Employer. FHCHC does not discriminate on the basis of race, religion, color, sex, age, non‑disqualifying physical or mental disability, national origin, veteran status or any other basis covered by appropriate law. All employment is decided on the basis of qualifications, merit, and business need.