Manager, Cybersecurity Operations

Memorial Physician Practices; Brentwood (TN); Hybrid; USD 130,000 - 190,000; Full time

Job summary

Lifepoint Health is seeking a Manager, Cybersecurity Operations to lead the enterprise cybersecurity program, oversee controls, and coordinate incident response across locations. The role drives improvements in detection speed and threat response while mentoring security analysts and engineers.

You will collaborate with stakeholders, embed security in engineering workflows, and evaluate MSSPs and new technologies to sustain risk-based protection.

Qualifications

• Master's degree in Cybersecurity, Information Technology, Computer Science, or equivalent depth of cybersecurity engineering experience.
• 8+ years in security operations, incident response, or cybersecurity roles with multi‑platform ownership and enterprise impact.
• Certifications preferred: CISSP, CISM or equivalent.

Responsibilities

• Provide leadership and oversight for the enterprise cybersecurity program across locations.
• Coordinate cyber incident response and manage elevated security events.
• Oversee security monitoring, risk management, and compliance with standards and policies.
• Collaborate with stakeholders to embed security in application and engineering workflows.
• Evaluate MSSPs and security technologies; manage vendor relationships and licensing.
• Lead budgeting, procurement, and forecasting for cybersecurity initiatives.

Skills

Leadership

Incident response

Threat intelligence

AI in security

Cross‑functional collaboration

Executive communication

Education

Master's degree in Cybersecurity or related field

Tools

SIEM

EDR

Cloud security

Job description

EEOC Statement

Lifepoint Health is an Equal Opportunity Employer. Lifepoint Health is committed to Equal Employment Opportunity for all applicants and employees and complies with all applicable laws prohibiting discrimination and harassment in employment.

You must be authorized to work in the United States without employer sponsorship.

The position is: Hybrid (4 on / 1 off (M-T))

Travel Requirements: Less than 25%

Position Summary

The Manager, Cybersecurity Operations provides operational leadership and oversight for the enterprise cybersecurity program. This role supports the development, implementation, and enforcement of technical security controls across all company locations while overseeing cyber defense systems, tools, and technologies. The Manager coordinates cybersecurity incident response, manages elevated security events, drives process improvements, and maintains critical stakeholder relationships.

Essential Functions

• Program Oversight & Operations
  • Hiring, mentoring, and coaching a diverse team of security analysts and engineers in multiple locations.
  • Support an enterprise threat intelligence program to assess the threat landscape.
  • Direct development, implementation, and enforcement of technical security controls.
  • Support enterprise security projects and process improvements.
  • Drive use of AI tools/systems to increase detection speed and reduce alert fatigue.
• Incident Response & Operations Management
  • Supervise day‑to‑day cyber defense operations.
  • Lead response actions for elevated cybersecurity events and incidents.
  • Lead hypothesis‑driven hunts across enterprise networks and cloud environments to identify hidden threats.
  • Coordinate detection and response automation efforts.
  • Create and mature incident response runbooks and conduct tabletop exercises to ensure team readiness.
• Security Monitoring & Analysis
  • Monitor and analyze SIEM alerts.
  • Assess vulnerabilities and coordinate remediation.
  • Ensure compliance with security standards and policies.
• Stakeholder Collaboration & Risk Management
  • Collaborate with Exposure Management and other stakeholders to understand attack surface.
  • Ensure security is embedded in application and engineering workflows.
  • Support audits and third‑party assessments.
• Technology & Vendor Management
  • Evaluate and manage third‑party Managed Security Service Providers (MSSPs) to maintain high service quality and SLA compliance.
  • Evaluate new security technologies.
  • Manage vendor relationships and licensing.
• Leadership & Business Support
  • Provide people leadership and performance management.
  • Support budgeting, procurement, and forecasting.

Knowledge, Skills & Abilities

• Education: Master's degree in Cybersecurity, Information Technology, Computer Science, or equivalent depth of cybersecurity engineering experience.
• Experience: 8+ years in security operations, incident response, or cybersecurity roles with multi‑platform ownership and proven enterprise impact.
• Certifications (preferred): ISC2 Certified Information Systems Security Professional (CISSP), ISACA Certified Information Security Manager (CISM) or similar.
• Skills and Abilities
  • Curiosity and willingness to learn new technologies, including use of AI and AI‑enabled security capabilities.
  • Domain expertise (identity, endpoint, email, cloud, network, data protection, etc).
  • Expert understanding of identity threats (MFA fatigue, token theft, OAuth abuse), email threats, EDR evasion, and cloud/system misconfigurations.
  • Demonstrated leadership of large‑scale incident response actions, detection / resiliency initiatives with measurable risk reduction.
  • Ability to solve complex cybersecurity operational problems without guidance.
  • Master‑level executive communication, risk storytelling, stakeholder influence, and cross‑functional leadership.
  • Ability to quickly organize and manage multiple competing tasks simultaneously.
  • Ability to translate adversary TTPs into engineering changes for security tools.

Physical and Mental Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential job responsibilities. While performing the duties of this job, the employee is occasionally required to stand; walk; sit for extended periods of time; use hands to finger, handle, feel objects, tools or controls; reach with hands and arms; climb stairs; balance; stoop, kneel, bend, crouch or crawl; talk or hear; taste or smell. The employee must occasionally lift and/or move up to 20 pounds. Repetitive motion of upper body is required for extended use of computers. Required specific vision abilities include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus.

Work Environment and Travel Requirements

The work environmental characteristics described here are representative of those that an employee may encounter while performing the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential job responsibilities. For those working on‑site, they will have a well‑lit, ventilated and climate‑controlled office environment with routine office equipment; some equipment has moving mechanical parts. Noise level in the work environment is typical for an office and/or hospital environment. In hospital environment, the individual may be exposed to hazards and unusual elements, which may include but are not limited to bloodborne pathogens and / or contagious illnesses, toxic chemicals, and biohazardous materials which may require extensive safety precautions and the use of protective equipment. This position can expect overnight travel by land and/or air according to the requirements below.