Remote IT Security Program Manager (HIPAA/NIST)

Recovery Centers of America; Northern (KY); Remote; USD 90,000 - 140,000; Full time

Job summary

Recovery Centers of America seeks an IT Security Program Manager to lead the cybersecurity program's daily operations and risk management. You will coordinate audits, manage third-party and risk assessments, and implement security controls aligned with HIPAA and NIST frameworks.

The role emphasizes policy governance, awareness programs, and leadership across business units, reporting to the CISO. Experience in healthcare security is essential.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Information Technology, or related field.
• 5–7 years of cybersecurity, IT risk management, or audit experience in a regulated environment (healthcare preferred).
• At least 2 years in program management or leadership overseeing information security functions.
• Strong working knowledge of HIPAA, NIST 800-53, HITRUST, and security risk management frameworks.

Responsibilities

• Manage day-to-day operations of RCA's cybersecurity program under the CISO.
• Coordinate and track internal/external security audits (HIPAA, SOC 2, NIST-based).
• Maintain Information Security Risk Register and mitigate critical findings.
• Lead tabletop exercises and incident response simulations.
• Collaborate with leadership to implement security policies across units.

Skills

Analytical skills

Communication skills

Organizational skills

Cross-functional collaboration

Mission alignment

Education

Bachelor's degree

Tools

SIEM tools

MDM (Intune)

Vulnerability management

Microsoft 365 Security Suite

KnowBe4

GRC platforms

Job description

Recovery Centers of America seeks an IT Security Program Manager to lead the cybersecurity program's daily operations and risk management. You will coordinate audits, manage third-party and risk assessments, and implement security controls aligned with HIPAA and NIST frameworks.

The role emphasizes policy governance, awareness programs, and leadership across business units, reporting to the CISO. Experience in healthcare security is essential.