Senior Cyber Risk Program Manager – Healthcare IT Security

Meritus Health Inc; Winchester (VA); On-site; USD 135,476,000 - 211,868,000; Full time

Benefits offered by this job

Health plan

Dental and vision insurance

Generous PTO

Tuition assistance

Retirement match

Employee assistance program

Wellness program

Job summary

Valley Health is seeking a Cyber Risk Program Manager to strengthen the organization’s information security posture. This role supports RMF alignment and works with IT teams to identify and mitigate cyber risks on campus in Winchester.

The position requires 7+ years in IT and 5+ years in cybersecurity/risk management with knowledge of HIPAA, NIST, ISO 27000 and COBIT frameworks. Onsite presence 2–3 days/week at Winchester Medical Center.

Qualifications

• Bachelor’s or postgraduate degree in a related field is required.
• 5+ years in cybersecurity, risk management, IT audit, or compliance.
• Industry certifications expected within 1 year of hire.

Responsibilities

• Monitor security posture and provide risk-based recommendations.
• Lead vulnerability management across apps, OS, networks, cloud.
• Collaborate to remediate vulnerabilities and protect data assets.
• Oversee IT audit processes and HIPAA/NIST compliance documentation.
• Advise on policies to address evolving threats and regulations.
• Backup to Information Security Manager and support senior decisions.

Skills

Cybersecurity

Risk assessment

Communication

Regulatory compliance

Security governance

Education

Bachelor’s or postgraduate degree

Tools

GRC tools

Process automation

Security metrics

Policy management

Job description

Valley Health is seeking a Cyber Risk Program Manager to strengthen the organization’s information security posture. This role supports RMF alignment and works with IT teams to identify and mitigate cyber risks on campus in Winchester.

The position requires 7+ years in IT and 5+ years in cybersecurity/risk management with knowledge of HIPAA, NIST, ISO 27000 and COBIT frameworks. Onsite presence 2–3 days/week at Winchester Medical Center.