Manager - Information Security

Stamford Health Medical Group; Stamford (CT); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Comprehensive health insurance

Wellness programs

Paid Time Off

403b pension

Free on-site parking

Childcare partnership

Job summary

Stamford Health Medical Group in Stamford, CT is seeking a Manager, Security Operations to lead our information security program. In partnership with the CISO, you will define and execute security strategies, oversee the security team, and ensure protection across on‑prem and cloud environments.

Responsibilities include enforcing policies, risk management, incident response, security metrics, and collaboration with IT.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Information Security
• Minimum 3 years of healthcare experience
• Minimum of ten years of relevant experience in Cybersecurity Operations & Engineering with at least five years leading teams
• Professional certifications in Information Security, Risk Management and/or Compliance (CISM, CISA, CRISC, CISSP, etc.)
• Proficient in Secure DNS, Secure email gateways, Fortinet firewall/NAC/VPN, threat and vulnerability management, endpoint security, Microsoft CAS/Authenticator

Responsibilities

• Define and execute Stamford Health’s information/cyber security strategies and operational excellence
• Oversee the Information security team and daily enforcement of Stamford’s information security program
• Lead security initiatives across perimeter/edge defenses and cloud environments
• Manage risk, policies, standards, and incident response planning
• Support forensics, penetration testing, and implementation of new security solutions
• Develop and maintain security runbooks, procedures, and documentation
• Coach and mentor team for high performance and collaboration with other IT teams

Skills

Leadership

Healthcare cybersecurity

Team management

Policy enforcement

Risk management

Communication

Education

Bachelor's degree in Computer Science/Information Systems/Information Security

Tools

Fortinet firewall/NAC/VPN

Secure DNS

Secure email gateways

Microsoft CAS/Authenticator

Threat & vulnerability management

Endpoint security

Digital certificate management

Job description

As a Certified Great Place to Work organization, Stamford Health understands what it takes to attract talent to improve our workforce and support our mission, to that end we offer:

• Comprehensive, low-cost health insurance plans (including GLP-1 coverage options) available day one
• Wellness programs
• Paid Time Off accruals
• Tax deferred annuity and (403b) pension plan
• Free on-site parking and train station shuttle
• Childcare partnership with Children’s Learning Center

Regular, Full Time

Monday-Friday, 8:00AM-5:00PM

Responsibilities

The Manager, Security Operations reports into the Director IS & CISO for Stamford Health. In partnership, the manager and CISO will define and execute Stamford’s Information/Cyber security strategies and operational excellence. The Manager, Security Operations oversees the Information security team and leads the day to the day support of enforcing Stamford’s Information security program. This effort includes perimeter/edge defenses, endpoint security, threat and vulnerability management, new project implementation, enforcing policies and standards, risk management and overall transformation and maturity of the information security initiatives. The Manager will assist the CISO with the support continual/regular refinement and enforcement of our Stamford’s Information Security policies, procedures, programs, and response plans, and with the creation and implementation of those policies, procedures and programs that do not currently exist.

Oversee the delivery and ongoing support of Stamford Health’s information security services.

Oversee the development and implementation of technical cybersecurity initiatives to continuously improve and expand protective and defensive security capabilities.

Monitor and report on key performance metrics to ensure service quality and delivery

Drive security control implementation and maturity in both on-prem and cloud environments and ensure compliance with corporate security policies and regulatory requirements.

Lead a team of Information Security architects, engineers, and analysts that plan, implement and sustain the full lifecycle of various cybersecurity capabilities.

Ensure security assessments of the information technology environment are being performed and with assisting in the developing and implementing security plans to mitigate those risks.

Assist with forensics investigation, penetration testing, implementation of new security solutions, participation in the creation and or maintenance of policies, standards, and procedures.

Recommend changes/upgrades to service components, technologies, processes and metrics to keep pace with the threat landscape and align with and business strategies.

Partner with department leaders / project sponsors in the implementation of secure-by-design initiatives into their business processes.

Develops and/or oversees the development of documentation (procedures, runbooks, etc.) to ensure effective service delivery

Coach and mentor team for high performance, creating a supportive working environment where everyone has the opportunity to fulfill their potential

Maintain up-to-date knowledge of industry standards, best practices and the evolving security threat landscape

Manage information security related tasks performed by the team including, but not limited to: digital forensic investigations, vulnerability management, alert and incident response.

Manage employees including performance management, salary administration, succession planning and workforce development.

Partner & collaborate with other IT teams as necessary to ensure that overall IT objectives are met.

Performs special projects and other duties as assigned by management

Qualifications

Bachelor’s degree in Computer Science, Information Systems, Information Security

Minimum 3 years of healthcare experience

Minimum of ten years of relevant experience in Cybersecurity Operations & Engineering with at least five years’ experience leading cybersecurity teams.

Professional certifications in Information Security, Risk Management and/or Compliance (such as CISM, CISA, CRISC, CISSP etc.)

Proficient in Secure DNS, Secure email gateways, Fortinet firewall/NAC/VPN, threat and vulnerability management, endpoint security, digital certification management, Microsoft CAS/Authenticator

Expert knowledge with general security best practices, protocols, etc.

Location: 3001 Summer St. Stamford, CT 06905, US